CVE Vulnerabilities

CVE-2023-40053

Published: Dec 06, 2023 | Modified: Dec 28, 2023
CVSS 3.x
5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously.

Affected Software

Name Vendor Start Version End Version
Serv-u Solarwinds 15.4.0 (including) 15.4.0 (including)
Serv-u Solarwinds 15.4.0-hotfix1 (including) 15.4.0-hotfix1 (including)
Serv-u Solarwinds 15.4.0-hotfix2 (including) 15.4.0-hotfix2 (including)

References