CVE-2024-28995: SolarWinds Serv-U Path Traversal Vulnerability
SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.
Other sources
SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Serv-Uto a version that resolves this vulnerability.Fixed in 15.4.2 HF 2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28995?
CVE-2024-28995 is classified as a high severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2024-28995?
To fix CVE-2024-28995, update SolarWinds Serv-U to the latest version that addresses this vulnerability.
What systems are affected by CVE-2024-28995?
CVE-2024-28995 affects SolarWinds Serv-U versions up to and including 15.4.2.
What kind of attack is possible with CVE-2024-28995?
CVE-2024-28995 allows attackers to conduct directory traversal attacks to read sensitive files on the host machine.
Is CVE-2024-28995 actively exploited?
Yes, CVE-2024-28995 has been reported as actively exploited in the wild.