Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-40060

2FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1

Description

A vulnerability has been identified within Serv-U 15.4 and 15.4 Hotfix 1 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action. 15.4.  SolarWinds found that the issue was not completely fixed in 15.4 Hotfix 1. 

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Serv-U

Default version status: affected

  • 15.4 to ≤ 15.4 Hotfix 1 affected

References