CVE-2017-6803 in FTP Voyager
Summary
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that (1) change the admin password, (2) terminate the scheduler, or (3) possibly execute arbitrary commands via crafted requests to Admin/XML/Result.xml.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
03/10/2017
Disclosure
03/20/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 98320 | SolarWinds FTP Voyager Scheduler cross-site request forgery | 352 | Proof-of-Concept | Official fix | CVE-2017-6803 |