Description
A vulnerability has been identified within Serv-U 15.4 and 15.4 Hotfix 1 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action.
15.4. SolarWinds found that the issue was not completely fixed in 15.4 Hotfix 1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | Serv-U | 15.4 – ≤ 15.4 Hotfix 1 | — |
Advisories 2
- WID-SEC-2023-2796 SolarWinds Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 31, 2023
- WID-SEC-2023-2033 SolarWinds Serv-U Managed File Transfer Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Sep 4, 2023