Discovered by Chris Moberly on behalf of The Missing Link Security
The Serv-U FTP Server is vulnerable to authentication bypass leading to privilege escalation in Windows operating environments due to broken access controls. This can only be exploited by users who already have local access to the Serv-U server.
Vulnerable version: 15.1.6.25 and earlier
Fixed in: 15.1.7
