Skip to content
OpenAdvisories
High · 8.8 CVE-2023-35184 EUVD-2023-39187GHSA-3qmw-7623-hwxf

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

Published Oct 19, 2023 · Updated Sep 12, 2024 · Assigned by SolarWinds

Description

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse a SolarWinds service resulting in a remote code execution.

Affected products

VendorProductAffectedFixed
SolarWinds Access Rights Manager previous versions – ≤ 2023.2.0.73 —

References