CVE-2023-40060

CVSS V2 None CVSS V3 None
Description
A vulnerability has been identified within Serv-U 15.4 and 15.4 Hotfix 1 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action. 15.4.  SolarWinds found that the issue was not completely fixed in 15.4 Hotfix 1. 
Overview
  • CVE ID
  • CVE-2023-40060
  • Assigner
  • SolarWinds
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-09-07T15:57:49.521Z
  • Last Modified Date
  • 2023-09-14T19:06:06.147Z
Weakness Enumerations
CWE URL
CWE-284 http://cwe.mitre.org/data/definitions/284.html
References
Reference URL Reference Tags
https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40060
https://support.solarwinds.com/SuccessCenter/s/article/Serv-U-15-4-0-Hotfix-2?language=en_US
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-40060
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40060
History
Created Old Value New Value Data Type Notes
2024-06-25 02:41:13 Added to TrackCVE