CVE-2021-35245

When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine.

Score

CVSS 3.1 8.4 High

Status

Modified - psirt@solarwinds.com

Published

2021-12-06

Last modified

2024-09-17

Weaknesses

CWE-284

Affected products

• Serv-u (Solarwinds)
• Serv-u Ftp (Solarwinds)

References

• https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-5_release_notes.htm
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35245