What is the CVSS score of CVE-2024-8510?

CVE-2024-8510 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.2%.

Which versions of Tomcat are affected by CVE-2024-8510?

Organizations using all deployments of N-central should be aware of moderate risk from CVE-2024-8510, a path traversal vulnerability rated CVSS 5.3. This could allow unauthorized file access.

How to fix or mitigate CVE-2024-8510?

Within 30 days: Identify affected systems running all deployments of N-central and apply vendor patches as part of regular patch cycle. Review file handling controls.

Tomcat CVE-2024-8510

MEDIUM

Path Traversal (CWE-22)

2025-03-17 a5532a13-c4dd-4202-bef1-e0b8f2f8d12b

Apache Path Traversal Tomcat N Central N Able

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:31 vuln.today

CVE Published

Mar 17, 2025 - 19:15 nvd

MEDIUM 5.3

DescriptionCVE.org

N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed.

This vulnerability is present in all deployments of N-central prior to N-central 2024.6.

AnalysisAI

N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Path Traversal (CWE-22), which allows attackers to access files and directories outside the intended path. N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed. This vulnerability is present in all deployments of N-central prior to N-central 2024.6. Affected products include: N-Able N-Central.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate and canonicalize file paths. Use chroot or sandboxing. Reject input containing path separators or '../' sequences.