CVE-2024-28995

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

Recent assessments:

sfewer-r7 at June 13, 2024 9:17am UTC reported:

Based upon our Rapid7 Analysis, I have rated the attacker value of this vulnerability as Very High, as an unauthenticated attacker can read files from a server, and the vulnerable product is a file tranfser solution. I have rated the exploitability as Very High, as exploitation is trivial.

Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 5