High · 8.8 CVE-2023-35182 EUVD-2023-39185GHSA-xpvx-v3vc-27gc

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

Published Oct 19, 2023 · Updated Sep 12, 2024 · Assigned by SolarWinds

Vendor: SolarWinds Product: Access Rights Manager

Description

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated users on SolarWinds ARM Server.

Affected products

Vendor	Product	Affected	Fixed
SolarWinds	Access Rights Manager	previous versions – ≤ 2023.2.0.73	—

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-35182
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm