CVE-2024-28072

Katalog CVE

CVSS 4.9 · Medium EPSS 0,64%

Kerentanan Insertion of Sensitive Information into Log File pada solarwinds serv-u. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags were not sanitized properly.

Rincian

Terbit di NVD

3 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-532: Insertion of Sensitive Information into Log File

EPSS (30 hari)

0,64% peluang dieksploitasi; lebih tinggi dari 49,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28072 advisory vendor
• https://solarwindscore.my.site.com/SuccessCenter/s/article/Serv-U-15-4-2-Hotfix-1-Release-Notes?language=en_US release notes