CVE-2024-28995

SolarWinds Serv-U allows remote attackers to read sensitive files via a path traversal vulnerability.

This path traversal flaw in SolarWinds Serv-U enables attackers to access sensitive host files, posing a significant data exposure risk for DIB organizations relying on SolarWinds infrastructure. The vulnerability is actively exploited in the wild, necessitating immediate patching and network segmentation to prevent unauthorized data access.

Shame score — Active exploitation of a known vulnerability in a widely deployed product indicates a failure in timely patching and security monitoring.