SolarWinds Serv-U Path Restriction Bypass Vulnerability

A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory. This issue requires administrative privileges to abuse. On Windows systems, this scored as medium due to differences in how paths and home directories are handled.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

对路径名的限制不恰当(路径遍历)

SolarWinds Serv-U 路径遍历漏洞

SolarWinds Serv-U是美国SolarWinds公司的一款 FTP（文件传输协议）服务器软件。 SolarWinds Serv-U存在路径遍历漏洞，该漏洞源于路径限制绕过，可能导致管理员权限的攻击者在目录中执行代码。

N/A

N/A