[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2024-28072Date: (C)2024-05-04   (M)2024-05-06


A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags were not sanitized properly.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 5.7CVSS Score :
Exploit Score: 0.9Exploit Score:
Impact Score: 4.7Impact Score:
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: ADJACENT_NETWORKAccess Vector:
Attack Complexity: LOWAccess Complexity:
Privileges Required: HIGHAuthentication:
User Interaction: NONEConfidentiality:
Scope: UNCHANGEDIntegrity:
Confidentiality: LOWAvailability:
Integrity: HIGH 
Availability: LOW 
  
Reference:
https://solarwindscore.my.site.com/SuccessCenter/s/article/Serv-U-15-4-2-Hotfix-1-Release-Notes?language=en_US
https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28072

CWE    1
CWE-532
XCCDF    1

© SecPod Technologies