WID-SEC-2024-0917 — SolarWinds Serv-U Managed File Transfer Server: Schwachstelle ermöglicht Codeausführung

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in SolarWinds Serv-U Managed File Transfer Server ausnutzen, um beliebigen Programmcode auszuführen.

Product

SolarWinds Serv-U ist eine FTP-Server Software.

Vulnerabilities 1

High 8.4

CVE-2024-28073

SolarWinds Serv-U Directory Traversal Remote Code Execution Vulnerability

SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited.

SolarWinds ServU

Apr 17, 2024

Revision history

2024-04-17 #1
Initiale Fassung

References

SolarWinds Trust Center Security Advisories vom 2024-04-17
https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28073
GitHub Advisory Database vom 2024-04-17
https://github.com/advisories/GHSA-rcw4-xmqq-44pv