flipflopfpv/nCentralDumpsterDiver

This application utilized the Self Registration feature to create a rogue agent that then dumps ApplianceConfiguration settings which may or may not contain information such as plain text passwords. This was reported to SolarWinds PSIRT on 10/10/2019 with very little feedback.

2 best points · 1 comments · 1 Hacker News post · 4 GitHub stars · View on GitHub

Hacker News discussions

• SolarWindsMSP N-Central Information Disclosure (2 points, 1 comments, by flipflopfpv, 2020-01-21)