CVE-2024-45711

Katalog CVE

CVSS 8.8 · High EPSS 6,3%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada solarwinds serv-u. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability

Rincian

Terbit di NVD

16 Oktober 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

6,3% peluang dieksploitasi; lebih tinggi dari 93,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45711 advisory vendor