SolarWinds Serv-U Managed File Transfer Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 2

• High 7.2
  CVE-2023-35179

  2FA/MFA Bypass Vulnerability in Serv-U 15.4

  A vulnerability has been identified within Serv-U 15.4 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action. 

  SolarWinds Serv-U
  Aug 10, 2023
• High 7.2
  CVE-2023-40060

  2FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1

  A vulnerability has been identified within Serv-U 15.4 and 15.4 Hotfix 1 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action. 15.4.  SolarWinds f…

  SolarWinds Serv-U
  Sep 7, 2023

Revision history

1. 2023-09-04 #2

   CVE-2023-35179 unvollständig behoben, weitere Updates verfügbar

2. 2023-08-10 #1

   Initiale Fassung

References

• Solarwinds Security Advisory vom 2023-09-04
  https://www.solarwinds.com/trust-center/security-advisories/cve-2023-40060
• Solarwind Security Advisory vom 2023-08-10
  https://support.solarwinds.com/SuccessCenter/s/article/Serv-U-15-4-Hotfix-1?language=en_US
• Github Security Advisory vom 2023-08-10
  https://github.com/advisories/GHSA-mc4v-9q33-23ph