CVE-2021-35245

Description

When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine.

CVSS breakdown

Affected products

• SolarWinds / Serv-U FTP15.2.4 Hotfix 1 and previous versions – 15.2.5

References

• VENDOR_ADVISORYhttps://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35245
• MISChttps://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-5_release_notes.htm