← All advisories

Medium severity5.7NVD Advisory· Published May 3, 2024· Updated Jun 17, 2026

CVE-2024-28072

CVE-2024-28072

Description

A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags were not sanitized properly.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

SolarWinds/Serv-U MFTllm-fuzzy4 versions
(expand)+ 3 more
- (no CPE)
- (no CPE)range: 15.4.2 and Previous Versions
- cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*range: <15.4.2
- cpe:2.3:a:solarwinds:serv-u:15.4.2:-:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

www.solarwinds.com/trust-center/security-advisories/CVE-2024-28072nvdVendor Advisory
solarwindscore.my.site.com/SuccessCenter/s/article/Serv-U-15-4-2-Hotfix-1-Release-NotesnvdRelease Notes

News mentions

0

No linked articles in our index yet.