N-central unauthenticated sessionID generation
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 6.9epss 36%
from disclosure to weapon2 days
Published on NVDNov 12
1st PoC+2d
metasploit+5d
VulnCheck+33d
exploitation probability
36%top 2% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
In short
N-central versions before 2025.4 can create valid session IDs for users who haven't logged in. This allows attackers to impersonate users or bypass authentication checks.
Technical detail
N-central < 2025.4 generates valid sessionIDs without requiring prior authentication, enabling unauthenticated attackers to obtain legitimate session tokens. An attacker can leverage these tokens to access protected resources or perform actions as if they were an authenticated user, bypassing the application's access control mechanisms.
Summary generated and translated by AI from the official description.
N-central < 2025.4 can generate sessionIDs for unauthenticated users
This issue affects N-central: before 2025.4.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
N-able · N-centralpublic PoCs found — 1
vulncheckvulncheck.com/xdb/1b7030e0575funverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.