CVE-2021-35250: Directory Transversal Vulnerability in Serv-U 15.3

Published Apr 25, 2022

Updated

A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to the Serv-U installation and server files. This issue has been resolved in Serv-U 15.3 Hotfix 1.

Affected Software

1 affected component

SolarWinds Serv-U=15.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Serv-U to a version that resolves this vulnerability.
Fixed in 15.3 HF1

Event History

Apr 25, 2022

CVE Published

via MITRE·07:47 PM

Data Sourced

via MITRE·07:47 PM

RemedyDescriptionSeverityWeakness

Apr 13, 2023

Exploit Published

via GitHub·05:13 AM

Frequently Asked Questions

What is CVE-2021-35250?

CVE-2021-35250 is a Directory Traversal Vulnerability in Serv-U 15.3.

What is the severity of CVE-2021-35250?

CVE-2021-35250 has a severity rating of 7.5 (high).

How does CVE-2021-35250 impact Serv-U 15.3?

CVE-2021-35250 may allow unauthorized access to files related to the Serv-U installation and server files.

Has CVE-2021-35250 been fixed?

Yes, CVE-2021-35250 has been resolved in Serv-U 15.3 Hotfix 1.

Where can I find more information about CVE-2021-35250?

You can find more information about CVE-2021-35250 on the SolarWinds support website and the SolarWinds security advisories page.