CVE-2023-40060

Summary

CVE-2023-40060 is a newly discovered vulnerability affecting Serv-U versions 15.4 and 15.4 Hotfix 1. This issue enables unauthorized access by bypassing multi-factor authentication if an attacker holds administrator-level privileges. SolarWinds, the software vendor, acknowledged that the vulnerability persisted despite the previously issued hotfix. Thus, affected organizations must apply a new patch to mitigate this security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.