Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2021-35245

Broken Access Control Vulnerability for SolarWinds Serv-U

Description

When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Serv-U FTP

  • 15.2.4 Hotfix 1 and previous versions to < 15.2.5affected

References