CVE-2024-28995: Trivially Exploitable Information Disclosure Vulnerability in SolarWinds Serv-U

On June 5, 2024, SolarWinds disclosed CVE-2024-28995, a high-severity directory traversal vulnerability affecting the Serv-U file transfer server. Successful exploitation of the vulnerability allows unauthenticated attackers to read sensitive files on the host.

attackers cve cve-2024 directory directory traversal directory traversal vulnerability disclosure emergent threat response exploitation file files file transfer high host information information disclosure information disclosure vulnerability june sensitive server serv-u severity solarwinds transfer unauthenticated vulnerability vulnerability management