Description (CNA)
When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SolarWinds / Serv-U FTP | affected 15.2.4 Hotfix 1 and previous versions before 15.2.5 |
CWE
CWE-284
References
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35245
- https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-5_release_notes.htm
ADP enrichment
No English description supplied.