Skip to content
OpenAdvisories
High · 7.5 CVE-2023-23841 EUVD-2023-27927GHSA-4hgh-2v7g-hc3q

SolarWinds Serv-U Exposure of Sensitive Information Vulnerability

Published Jun 15, 2023 · Updated Dec 12, 2024 · Assigned by SolarWinds

Description

SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.  Part of the URL of the request discloses sensitive data.

Affected products

VendorProductAffectedFixed
SolarWinds ServU previous versions – ≤ 15.3.2 —

Advisories 1

References