Описание
An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481.
Ссылки
- Release NotesVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 15.2.2 (исключая)
cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*
EPSS
Процентиль: 86%
0.02914
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-74
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481.
EPSS
Процентиль: 86%
0.02914
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-74