Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2018-10240

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2018-10240.

Coverage Span: 2018-05-14
Reports: 1 related reports

Associated Reports & Timeline

SolarWinds Serv-U Managed File Transfer – Insufficient Session ID Entropy

SolarWinds Serv-U MFT 15.1.6.25 issues low-entropy integer session tokens usable in URLs; a brute-forced value hijacks sessions after only 4,780 guesses (CVE-2018-10240).