[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fF6uUb_5fpuHQAl8uh9V_4hxLpnH5Bwg1_hODTBFN9Bw":3,"g5a-risk:CVE-2020-15909":113},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":63,"weaknesses":64,"weaknessesCount":49,"isActivelyExploited":73,"cisaInfo":27,"otxData":27,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":109,"notableEvents":110},"CVE-2020-15909","What is CVE-2020-15909?","SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access. The N-Central JSESSIONID cookie attribute is not checked against multiple sources such as sourceip, MFA claim, etc. as long as the victim stays logged in within N-Central. To take advantage of this, cookie could be stolen and the JSESSIONID can be captured. On its own this is not a surprising result; low security tools allow the cookie to roam from machine to machine. The JSESSION cookie can then be used on the attackers’ workstation by browsing to the victim’s NCentral server URL and replacing the JSESSIONID attribute value by the captured value. Expected behavior would be to check this against a second source and enforce at least a reauthentication or multi factor request as N-Central is a highly privileged service.","SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access. The N-Central JSESSIONID cookie attribute is n...","2020-10-19T13:15:13.267","2020-10-29T22:14:15.537",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":35,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.02222,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"solarwinds","n-central","*","cpe:2.3:a:solarwinds:n-central:*:*:*:*:*:*:*:*",1,[51,57],{"url":52,"source":53,"tags":54},"https:\u002F\u002Flimenetworks.nl\u002Fwp-content\u002Fuploads\u002FCVE-934261-v-1.2.pdf","Limenetworks",[55,56],"Exploit","Third Party Advisory",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fwww.solarwindsmsp.com\u002Fproducts\u002Fn-central","Solarwindsmsp",[61,62],"Product","Vendor Advisory",2,[65],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-384","Session Fixation","Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.","Such a scenario is commonly observed when:\nIn the generic exploit of session fixation vulnerabilities, an attacker creates a new session on a web application and records the associated session identifier. The attacker then causes the victim to associate, and possibly authenticate, against the server using that session identifier, giving the attacker access to the user's account through the active session.","Incomplete","Compound","Composite",false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2020-15909? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-15909, a high severity cyber security vulnerability from 2020. SolarWinds N-central through 2020.1 allows session hijackin...","CVE-2020-15909, CVE-2020-15909 vulnerability, CVE-2020-15909 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, solarwinds security, n-central vulnerability","\u002Fwhat-is\u002Fcve-2020-15909",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":10,"dateModified":11,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-15909","Cybersecurity","CVE-2020-15909, CVE-2020-15909 vulnerability, CVE-2020-15909 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":27,"Negate":27,"Nodes":102},[103],{"Operator":104,"Negate":27,"CPEMatch":105},"OR",[106],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":107,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":108},"5B3A0E0D-1539-4F2F-9541-BBECD11C4038","2020.1",[],[],{"lastModified":11,"cacheTime":112,"version":33},1793387972565,{"score":114,"band":115,"action":116,"scoredAt":117},54,"Medium","Plan remediation","2026-10-30T06:50:02.712384+00:00"]