RULE(RULE ID:338135)

Rule General Information
Release Date: 2024-06-18
Rule Name: SolarWinds Serv-U Directory Traversal Vulnerability (CVE-2024-28995)
Severity:
CVE ID:
Rule Protection Details
Description: SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.
Impact: An attacker can abtain sensitive information of the target victim, and do malicious actions to gain profits using the information.
Affected OS: Windows, Linux, Others
Reference: https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995
Solutions
Refer to the announcement or patch by the vendor: https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995