CVE-2024-28200
N-central Authentication Bypass
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
N-central Authentication Bypass
| Assigner | N-able |
| Reserved | 2024-03-06 |
| Published | 2024-07-01 |
| Updated | 2024-08-02 |
The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
CWE-288: Authentication Bypass Using an Alternate Path or Channel
https://documentation.n-able.com/N-central/Release_Notes/GA/Content/2024.2%20Release%20Notes.htm
