CVE-2020-7984

Description

SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain admin credentials from the Agent & Probe settings, and obtain other sensitive information. The attacker can use a customer ID to self register and read any aspects of the agent/appliance configuration.

Weakness classification

• CWE-319: Cleartext Transmission of Sensitive Information

Primary references

• cve@mitre.org — Exploit, Patch, Third Party Advisory
• cve@mitre.org — Permissions Required, Vendor Advisory
• cve@mitre.org — Permissions Required, Vendor Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory