Description
SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file that allows an attacker to exfiltrate data.
References
- 20181201 SolarWinds SFTP Vulnerabilities mailing-list
Unscored
CVE-2018-16792
EUVD-2018-8592GHSA-gxgf-5573-5q84
SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file that allows an atta…
Published Dec 5, 2018 · Updated Aug 5, 2024 · Assigned by mitre