high7.5
CVE-2021-3154
An issue was discovered in SolarWinds Serv-U before 15.2.2.
Impact
An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Serv-U | before 15.2.2 |