CVE-2024-28995

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine...

CVE-2024-28995

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine...

CVE-2024-28995

CVE-2024-28995 is a directory traversal vulnerability in SolarWinds Serv-U that allows unauthenticated attackers to read sensitive host files. The flaw affects Serv-U and can be triggered via crafted directory/file paths (e.g., using InternalDir/InternalFile payloads) to access local logs and sys...

CVE-2024-28995 SolarWinds Serv-U L Directory Transversal Vulnerability

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine...

CVE-2024-28995 SolarWinds Serv-U L Directory Transversal Vulnerability

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine...

PT-2024-4165

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U versions 15.4.2 and earlier Description SolarWinds Serv-U was susceptible to a directory traversal vulnerability that would allow access to read sensitive files on the host machine. Threat actors are actively exploiting this...

SolarWinds Serv-U 路径遍历漏洞

Serv-U FTP Server is a File Transfer Protocol FTP server software. A SolarWinds Serv-U FTP Server directory traversal vulnerability can be exploited by an attacker to read arbitrary files by constructing a malicious request...

CVE-2024-28995

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. Recent assessments: sfewer-r7 at June 13, 2024 9:17am UTC reported: Based upon our Rapid7 Analysis, I have rated the attacker value of this vulnerability...

PT-2024-22252 · Solarwinds · Serv-U Ftp Server

Name of the Vulnerable Software and Affected Versions: Serv-U FTP server affected versions not specified Description: A highly privileged account can overwrite arbitrary files on the system with log output due to improper sanitization of log file path tags. Recommendations: At the moment, there i...

SolarWinds Serv-U FTP Server 日志信息泄露漏洞

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the U.S. company SolarWinds. A log information disclosure vulnerability exists in SolarWinds Serv-U FTP Server 15.4.2 and earlier versions, which stems from log file path labels that are not properly cleaned up,...

SolarWinds Serv-U 15.4.0 < 15.4.3

The version of SolarWinds Serv-U installed on the remote host is prior to 15.4.2 HF1. It is, therefore, affected by a vulnerability as referenced in the serv-u1542hotfix1 advisory. - A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags we...

The vulnerability of the SolarWinds Serv-U File Server file server arises from incorrect path name restrictions for the restricted access directory, allowing a hacker to execute arbitrary code.

The vulnerability of the SolarWinds Serv-U File Server file server is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

SolarWinds Serv-U < 15.4.2 Directory Traversal (CVE-2024-28073)

The version of SolarWinds Serv-U installed on the remote host is prior to 15.4.2. It is, therefore, affected by a directory traversal remote code vulnerability as referenced in the serv-u1542 advisory. This vulnerability requires a highly privileged account to be exploited. Note that Nessus has n...

SolarWinds Serv-U 15.4.1.0 < 15.4.2

The version of SolarWinds Serv-U installed on the remote host is prior to 15.4.2. It is, therefore, affected by a vulnerability as referenced in the solarwindsserv-u1542 advisory. - SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerabilit...

CVE-2024-28073

SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited...

CVE-2024-28073

SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited...

CVE-2024-28073

CVE-2024-28073 affects SolarWinds Serv-U File Server. Multiple sources confirm a Directory Traversal Remote Code Execution vulnerability that requires a highly privileged account to exploit. The issue is associated with versions prior to 15.4.2 (e.g., Serv-U 15.4.1.x and earlier) and can lead to ...

CVE-2024-28073 SolarWinds Serv-U Directory Traversal Remote Code Execution Vulnerability

SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited...

CVE-2024-28073 SolarWinds Serv-U Directory Traversal Remote Code Execution Vulnerability

SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited...

SolarWinds Serv-U FTP Server 路径遍历漏洞

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US-based SolarWinds Corporation. A path traversal vulnerability exists in SolarWinds Serv-U FTP Server 15.4.1.128 and earlier versions, which could be exploited by an attacker to execute remote code...