CVE-2018-15906

SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2019-03-21

Last modified

2024-08-05

Affected products

• Serv-u Ftp Server (Solarwinds)

References

• http://packetstormsecurity.com/files/151473/SolarWinds-Serv-U-FTP-15.1.6-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2019/Feb/4
• http://www.securityfocus.com/bid/106844