SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability

A vulnerability allowing Insecure Direct Object Reference (IDOR) has been identified in SolarWinds Serv-U. This vulnerability enables a malicious actor with administrative privileges to execute native code as a privileged account. On Windows deployments, this issue is considered medium risk, as services typically run under less-privileged accounts by default.

Impact

Exploitation of this vulnerability allows for remote code execution as a privileged account.