PT-2015-6984 · Solarwinds · Solarwinds N-Central

Gary Blosser · Published 2015-07-21 · Updated 2016-11-28 · CVE-2015-5610

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SolarWinds N-Able N-Central versions prior to 9.5.1.4514

Description The issue allows remote authenticated users to obtain the cleartext domain-administrator password. This is possible because the RSM service uses the same password decryption key across different customers' installations. An attacker can locate the encrypted password within HTML source code and then use knowledge of this key from another installation to obtain the password.

Recommendations For versions prior to 9.5.1.4514, update to version 9.5.1.4514 or later to resolve the issue. As a temporary workaround, consider restricting access to the RSM service to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-5610

Affected Products

Solarwinds N-Central

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-5610 · Security Note
• http://securityfocus.com/bid/75969 · Note
• http://kb.cert.org/vuls/id/912036 · Note