Medium WID-SEC-2022-2359 1 CVE

SolarWinds Serv-U Managed File Transfer Server: Schwachstelle ermöglicht Offenlegung von Informationen

Published Dec 18, 2022 · Updated Dec 18, 2022 · de-DE

Vendor: SolarWinds Product: Serv-U Managed File Transfer Server < 15.3.2 Platform: Windows

Summary

Ein Angreifer kann eine Schwachstelle in SolarWinds Serv-U Managed File Transfer Server ausnutzen, um Informationen offenzulegen.

Product

SolarWinds Serv-U ist eine FTP-Server Software.

Vulnerabilities 1

High 7.5

CVE-2021-35252

Common Key Vulnerability in Serv-U FTP Server

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to an attacker can be simply recovered to plaintext.

SolarWinds Serv-U FTP Server

Dec 16, 2022

Revision history

2022-12-18 #1
Initiale Fassung

References

SolarWinds Security Advisory vom 2022-12-18
https://www.solarwinds.com/de/trust-center/security-advisories/cve-2021-35252