Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2021-35247

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2021-35247

Description:
Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper characters. To insure proper input validation is completed in all environments. SolarWinds recommends scheduling an update to the latest version of Serv-U.
Last updated date:
02/10/2022

Reports

alt

ACTIVELY EXPLOITED

Type:
exploitation
Confidence:
FALSE_POSITIVE
Date of publishing:
01/10/2022
Reference url to background

https://nvd.nist.gov/vuln/detail/CVE-2021-35247

Type:
exploitation
Confidence:
HIGH
Date of publishing:
01/20/2022
Vulnerability FeedContributorsAbout

@inTheWild

©2022

Privacy Policy