CVE-2023-23841: SolarWinds Serv-U Exposure of Sensitive Information Vulnerability

Q: What is CVE-2023-23841?

CVE-2023-23841 is a vulnerability in SolarWinds Serv-U that allows sensitive data to be disclosed in the URL of an HTTP request when changing or updating attributes for File Share or File request.

Q: How severe is CVE-2023-23841?

CVE-2023-23841 has a severity rating of 7.5 (high).

Q: How does CVE-2023-23841 impact SolarWinds Serv-U?

CVE-2023-23841 affects SolarWinds Serv-U by exposing sensitive data in the URL of an HTTP request.

Q: How can I fix CVE-2023-23841?

To fix CVE-2023-23841, it is recommended to upgrade SolarWinds Serv-U to a version that is not affected by this vulnerability.

Q: Where can I find more information about CVE-2023-23841?

More information about CVE-2023-23841 can be found in the SolarWinds Serv-U release notes and security advisories.

Published Jun 15, 2023

Updated

SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.  Part of the URL of the request discloses sensitive data.

Other sources

SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.? Part of the URL of the request discloses sensitive data.

Affected Software

1 affected component

SolarWinds Serv-U<15.4

Remediation

Information

SolarWinds recommends customers upgrade to SolarWinds Serv-U version 15.4 as soon as it becomes available. The expected release date is May 17, 2023.

Event History

Jun 15, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-23841?