PT-2020-16130 · Solarwinds · Solarwinds N-Central

Fabian Ullrich · Published 2020-12-16 · Updated 2020-12-21 · CVE-2020-25618

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670

Description An issue was discovered in the sudo configuration of SolarWinds N-Central, which has incorrect access control. The nable web user account is effectively able to run arbitrary OS commands as root because the use of root privileges is not limited to specific programs listed in the sudoers file.

Recommendations For SolarWinds N-Central version 12.3.0.670, consider restricting the privileges of the nable web user account to prevent it from running arbitrary OS commands as root until a patch is available. As a temporary workaround, review and modify the sudoers file to limit the use of root privileges to specific programs.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-25618

Affected Products

Solarwinds N-Central

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2020-25618 · Security Note
• https://support.solarwinds.com/SuccessCenter/s · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25618 · Vendor Advisory
• https://t.me/cvenotify/7166 · Telegram Post
• https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central · Note
• https://t.me/cvenotify/7467 · Telegram Post
• https://ernw.de/en/publications.html · Note
• https://t.me/cibsecurity/20918 · Telegram Post