CVE-2020-25617

Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670

Description An issue was discovered in SolarWinds N-Central, where the AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), leading to execution of OS commands as root.

Recommendations For SolarWinds N-Central version 12.3.0.670, as a temporary workaround, consider restricting access to the AdvancedScripts HTTP endpoint until a patch is available. Additionally, limiting the privileges of authenticated users in the N-Central Administration Console (NAC) may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.