Skip to content
OpenAdvisories
High · 7.2 CVE-2023-35179 EUVD-2023-39182GHSA-mc4v-9q33-23ph

2FA/MFA Bypass Vulnerability in Serv-U 15.4

Published Aug 10, 2023 · Updated Oct 9, 2024 · Assigned by SolarWinds

Description

A vulnerability has been identified within Serv-U 15.4 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action. 

Affected products

VendorProductAffectedFixed
SolarWinds Serv-U 15.4 —

Advisories 1

References