CVE-2020-25618

An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as root (i.e., the use of root privileges is not limited to specific programs listed in the sudoers file).

• CWE-78

• https://ernw.de/en/publications.htmlThird Party Advisory
• https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/Third Party Advisory
• https://support.solarwinds.com/SuccessCenter/s/Vendor Advisory
• https://ernw.de/en/publications.htmlThird Party Advisory
• https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/Third Party Advisory
• https://support.solarwinds.com/SuccessCenter/s/Vendor Advisory

Published

Dec 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25610The AWV component of Mitel MiCollab before 9.2 could allow a…5.3
• CVE-2020-25611The AWV portal of Mitel MiCollab before 9.2 could allow an a…6.1
• CVE-2020-25612The NuPoint Messenger of Mitel MiCollab before 9.2 could all…4.9
• CVE-2020-25613An issue was discovered in Ruby through 2.5.8, 2.6.x through…7.5
• CVE-2020-25614xmlquery before 1.3.1 lacks a check for whether a LoadURL re…9.8
• CVE-2020-25617An issue was discovered in SolarWinds N-Central 12.3.0.670. …8.8
• CVE-2020-25619An issue was discovered in SolarWinds N-Central 12.3.0.670. …4.4
• CVE-2020-2562Vulnerability in the Primavera Portfolio Management product …6.1
• CVE-2020-25620An issue was discovered in SolarWinds N-Central 12.3.0.670. …7.8
• CVE-2020-25621An issue was discovered in SolarWinds N-Central 12.3.0.670. …8.4
• CVE-2020-25622An issue was discovered in SolarWinds N-Central 12.3.0.670. …8.8
• CVE-2020-25623Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allow…7.5