Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2025-7051

N-central Syslog Configuration Insecure Direct Object Reference

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
N-able

Description

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

N-able N-central

Default version status: unaffected

  • 2024.6.0 to ≤ 2024.6.16affected
  • 2025.1affected

References