Skip to content
OpenAdvisories
Critical · 9.6 CVE-2024-23471 EUVD-2024-20969GHSA-4ww9-x3qp-vcwc

SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability

Published Jul 17, 2024 · Updated Nov 3, 2026 · Assigned by SolarWinds

Description

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

Affected products

VendorProductAffectedFixed
SolarWinds Access Rights Manager previous versions – ≤ 2023.2.4 —

Advisories 1

References