CVE-2023-23841

SolarWinds Serv-U Exposure of Sensitive Information Vulnerability

State: Published
Severity: 7.5 High
Published: Jun 15, 2023
Updated: Dec 12, 2024
Reserved: Jan 18, 2023

Description

SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.  Part of the URL of the request discloses sensitive data.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	SolarWinds

Weaknesses

CWE-319 Cleartext Transmission of Sensitive Information

Affected Products

Product	Versions
ServUSolarWinds	previous versions through 15.3.2Affected

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23841vendor-advisory
https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/serv-u_15-4_release_notes.htmrelease-notes

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.