CVE-2021-35226 — Hashed Credential Exposure Vulnerability

CVE-2021-35226

Hashed Credential Exposure Vulnerability PUBLISHED

Description (CNA)

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and require authenticated access with an NCM role.

Affected (CNA)

Vendor / product	Versions
SolarWinds / Network Configuration Manager	affected 2020.2.5 and previous version before 2020.2.5

CWE

CWE-326

References

https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35226

ADP enrichment

CVE

No English description supplied.

https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35226