High · 8.0 CVE-2023-35180 EUVD-2023-39183GHSA-hqmv-5rff-cqrx

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

Published Oct 19, 2023 · Updated Sep 12, 2024 · Assigned by SolarWinds

Vendor: SolarWinds Product: Access Rights Manager

Description

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows authenticated users to abuse SolarWinds ARM API.

Affected products

Vendor	Product	Affected	Fixed
SolarWinds	Access Rights Manager	previous versions – ≤ 2023.2.0.73	—

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-35180
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm