Solarwinds Serv-U

Serv-U Remote Memory Escape Vulnerability

SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection.

SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U Path Restriction Bypass Vulnerability

SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability

SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U Remote Code Execution Vulnerability

SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability

SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability

SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U Broken Access Control Vulnerability

SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability

SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U Broken Access Control Vulnerability

SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability

SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability

SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability

Execute Command Function Allows Remote Code Execution (RCE)Vulnerability

A valid CSRF token is present in response to an invalid request

SolarWinds Serv-U L Directory Transversal Vulnerability

Broken Access Control Vulnerability for SolarWinds Serv-U

SolarWinds Serv-U Directory Traversal Remote Code Execution Vulnerability

Directory Transversal Vulnerability in Serv-U 15.3

SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response.

SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893.

An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481.

Common Key Vulnerability in Serv-U FTP Server

SolarWinds Serv-U Exposure of Sensitive Information Vulnerability

SolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token that can be included in requests to the application as a URL parameter in lieu of a session cookie. This session token's value can be brute-forced by an attacker to obtain the corresponding session cookie and hijack the user's session.

2FA/MFA Bypass Vulnerability in Serv-U 15.4

2FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1

In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files (that include users' password hashes) that is world readable and writable. An unprivileged Windows user (having access to the server's filesystem) can add an FTP user by copying a valid profile file to this directory. For example, if this profile sets up a user with a C:\ home directory, then the attacker obtains access to read or replace arbitrary files with LocalSystem privileges.