CVE-2023-23841
Assigner: SolarWinds
Published: 2023-06-15T00:00:00
State: PUBLISHED
affected: defaultStatus: unaffected
product: ServU
vendor: SolarWinds
versions: lessThanOrEqual: 15.3.2
status: affected
version: previous versions
versionType: 15.4
datePublic: 2023-05-16T17:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">SolarWinds Serv-U is submitting an HTTP request when changing or updating </span><span style="background-color: rgb(255, 255, 255);">the attributes</span><span style="background-color: rgb(255, 255, 255);"> for File Share or File request.  Part of the URL of the request discloses sensitive data.</span><span style="background-color: rgb(255, 255, 255);">&nbsp;</span>


value: 
SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.  Part of the URL of the request discloses sensitive data. 


impacts: capecId: CAPEC-204
descriptions: value: CAPEC-204 Lifting Sensitive Data Embedded in Cache
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-319
description: CWE-319 Cleartext Transmission of Sensitive Information
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: SolarWinds recommends customers upgrade to SolarWinds Serv-U version 15.4 as soon as it becomes available. The expected release date is May 17, 2023.
value: SolarWinds recommends customers upgrade to SolarWinds Serv-U version 15.4 as soon as it becomes available. The expected release date is May 17, 2023.
source: discovery: EXTERNAL
title: SolarWinds Serv-U Exposure of Sensitive Information Vulnerability 
x_generator: engine: Vulnogram 0.1.0-dev