CVE-2024-28995

Summary

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

Affected Software

Weaknesses

• CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: active
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28995

CVE Program Container

Additional References

• https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995

References

• https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995

• ←Previous
• Next→