Medium WID-SEC-2023-0967 1 CVE

SolarWinds Serv-U Managed File Transfer Server: Schwachstelle ermöglicht Offenlegung von Informationen

Published Mar 2, 2022 · Updated Apr 13, 2023 · Revision 2 · de-DE

Vendor: SolarWinds Product: Serv-U Managed File Transfer Server < 15.3 HF 1 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in SolarWinds Serv-U Managed File Transfer Server ausnutzen, um Informationen offenzulegen.

Product

SolarWinds Serv-U ist eine FTP-Server Software.

Vulnerabilities 1

High 7.5

CVE-2021-35250 Public exploit Scanner template EPSS 13%

Directory Transversal Vulnerability in Serv-U 15.3

A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to the Serv-U installation and server files. This issue has been resolved in Serv-U 15.3 Hotfix 1.

SolarWinds Serv-U

Apr 25, 2022

Revision history

2023-04-13 #2
PoC aufgenommen
2022-03-02 #1
Initiale Fassung

References

PoC CVE-2021-35250 vom 2023-04-13
https://github.com/rissor41/SolarWinds-CVE-2021-35250
Solarwinds Serv-U Advisory CVE-2022-35250 vom 2022-03-02
https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35250