Medium WID-SEC-2024-1027 1 CVE

SolarWinds Serv-U Managed File Transfer Server: Schwachstelle ermöglicht Manipulation von Dateien

Published May 5, 2024 · Updated May 5, 2024 · de-DE

Vendor: SolarWinds Product: Serv-U Platform: Linux Platform: Windows

Summary

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in SolarWinds Serv-U Managed File Transfer Server ausnutzen, um Dateien zu manipulieren.

Product

SolarWinds Serv-U ist eine FTP-Server Software.

Vulnerabilities 1

Medium 5.7

CVE-2024-28072

Arbitrary File Overwrite Vulnerability

A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags were not sanitized properly.

SolarWinds Serv-U

May 3, 2024

Revision history

2024-05-05 #1
Initiale Fassung

References

SolarWinds Trust Center Security Advisories vom 2024-05-05
https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28072