CVE-2021-3154

An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2021-05-04

Last modified

2024-08-03

Weaknesses

CWE-74

Affected products

• Serv-u (Solarwinds)

References

• https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-2_release_notes.htm