Blueshield
Solarwinds
Devolutions
Blacklens
A1 Digital
Atera

SolarWinds Security-Update

SolarWinds hat ein Sicherheitsupdate für Serv-U veröffentlicht und drängt auf baldige Aktualisierung! 

Bitte folgen Sie der Empfehlung. 

Hier der Originaltext aus der Email an die Kunden:

IMPORTANT SECURITY UPDATES FOR SOLARWINDS SERV-U PRODUCTS

Summary:

SolarWinds released the following product update on June 5, 2024, with one or more security fixes. Due to the mentions of this vulnerability in recently published research and media coverage, we strongly recommend updating your software as soon as possible:

  • Serv-U 15.4.2 HF 2

CVE and Security Fixes:

CVE ID & Vulnerability

Vulnerable Product

Fixed Product Version & Mitigation

CVE-2024-28995
Local File Disclosure
Directory Transversal
Vulnerability

SolarWinds Serv-U 15.4.2 HF 1 and previous versions

SolarWinds Serv-U 15.4.2 HF 2

 

 

SolarWinds recommends you upgrade the applicable products you currently own and have deployed within your environment. If you cannot upgrade immediately and a mitigation is offered, we recommend applying it until you can upgrade.

Thank you to the independent security researchers for responsible disclosures and working with SolarWinds in addressing these items.

SolarWinds Information Security Team