Bastion Security

SolarWinds SERV-U — CSRF vulnerability

Claudio Contin found that CSRF tokens are not implemented in the file upload functionality of the Secure File Transfer web client.

Talk to an expert

[no content]

‍

[no content]

‍

December 17, 2019

Solarwinds provided an advisory and resolution for this issue here.

Service Development Manager

Government Agency

"Great service, clear, detailed and precise information on what our vulnerabilities were and what needs addressing. Couldn't have been easier to deal with and very professional."

Expert methods

We have the tools to pinpoint risks

Whether it’s hidden vulnerabilities or patterns you might miss, we help you stay one step ahead and make confident, informed decisions. Understand how our services can help your business uncover critical risks

Talk to an expert

Employee Cyber Training & Awareness

Your people are your first line of defence. Our cyber training builds awareness, sharpens instincts and turns everyday staff into assets.

Advisory

When clarity is critical and stakes are high, our advisory services deliver strategic, executive-level security expertise that empowers decision-making

Are you experiencing a security breach?

Incident Response

+64 4 281 7534