CVE-2020-22428

概要

参考情報

• github.com/matrix · Not Applicable
• support.solarwinds.com/SuccessCenter/s/article/Serv-U-15-1-6-Hotfix-3 · Vendor Advisory
• twitter.com/gm4tr1x · Third Party Advisory
• linkedin.com/in/gabrielegristina · Permissions Required

serv-u ftp server のその他の脆弱性

• CVE-2020-15543緊急 9.8SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
• CVE-2020-15542緊急 9.8SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
• CVE-2020-15541緊急 9.8SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
• CVE-2019-19829中 5.4A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability t…
• CVE-2019-13182中 5.4A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7.