Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In SolarWinds SFTP/SCP Server through 2018-09-10, the configuration file is world readable and writable, and stores user passwords in an insecure manner, allowing an attacker to determine passwords for potentially privileged accounts. This also grants the attacker an ability to backdoor the server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SolarWinds SFTP/SCP Server 信任管理问题漏洞
Vulnerability Description
SolarWinds SFTP/SCP Server是一款免费的网络文件传输服务器。 SolarWinds SFTP/SCP Server 2018-09-10及之前版本中存在安全漏洞，该漏洞源于配置文件被设置为全局可读和可写，且以不安全的方式存储用户密码。攻击者可利用该漏洞判断具有权限的账户的密码并在服务器上植入后门。
CVSS Information
N/A
Vulnerability Type
N/A