Skip to content
OpenAdvisories
Critical · 9.6 CVE-2024-23470 EUVD-2024-20968GHSA-jvf5-642m-hpc3

SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability

Published Jul 17, 2024 · Updated Aug 1, 2024 · Assigned by SolarWinds

Description

The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables.

Affected products

VendorProductAffectedFixed
SolarWinds Access Rights Manager previous versions – ≤ 2023.2.4 —

Advisories 1

References