High · 7.8 CVE-2023-35183 EUVD-2023-39186GHSA-82hj-ghm7-6vpg

SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability

Published Oct 19, 2023 · Updated Sep 13, 2024 · Assigned by SolarWinds

Vendor: SolarWinds Product: Access Rights Manager

Description

The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows authenticated users to abuse local resources to Privilege Escalation.

Affected products

Vendor	Product	Affected	Fixed
SolarWinds	Access Rights Manager	previous versions – ≤ 2023.2.0.73	—

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-35183
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm