VULNERABILITY INTELLIGENCE

CVE-2021-35226

CVSS score6.5 MEDIUM
EPSS probability0.55%
CISA KEVNot currently listed
Published2022-10-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and require authenticated access with an NCM role.

Weakness classification

  • psirt@solarwinds.com: CWE-326
  • nvd@nist.gov: CWE-326

Primary references