CVE-2025-7051 — N-central Syslog Configuration Insecure Direct Object Reference

CVE-2025-7051

N-central Syslog Configuration Insecure Direct Object Reference PUBLISHED

Description (CNA)

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2.

Affected (CNA)

Vendor / product	Versions
N-able / N-central	affected 2024.6.0 through 2024.6.16; affected 2025.1

CWE

CWE-284

References

https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2025.2_Release_Notes.htm

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.