VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Oct 10, 2022· Updated Jun 17, 2026

CVE-2021-35226

CVE-2021-35226

Description

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and require authenticated access with an NCM role.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • SolarWinds/Network Configuration Manager3 versions
    cpe:2.3:a:solarwinds:network_configuration_manager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:solarwinds:network_configuration_manager:*:*:*:*:*:*:*:*range: <=2020.2.5
    • (no CPE)
    • (no CPE)range: 2020.2.5 and previous version

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.