ID | CVE-2018-10241 | ||||||
Summary | A denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated user to crash the application (with a NULL pointer dereference) via a specially crafted URL beginning with the /Web%20Client/ substring. | ||||||
References | |||||||
Vulnerable Configurations |
|
||||||
CVSS |
|
||||||
CWE | CWE-476 | ||||||
CAPEC |
|
||||||
Access |
|
||||||
Impact |
|
||||||
cvss-vector via4 | AV:N/AC:L/Au:S/C:N/I:N/A:P | ||||||
refmap via4 |
|
||||||
Last major update | 20-06-2018 - 14:17 | ||||||
Published | 16-05-2018 - 14:29 | ||||||
Last modified | 20-06-2018 - 14:17 |