Critical · 9.6 CVE-2024-23472 EUVD-2024-20970GHSA-9g4r-89hx-hv6j

SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

Published Jul 17, 2024 · Updated Nov 3, 2026 · Assigned by SolarWinds

Vendor: SolarWinds Product: Access Rights Manager

Description

SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.

Affected products

Vendor	Product	Affected	Fixed
SolarWinds	Access Rights Manager	previous versions – ≤ 2023.2.4	—

Advisories 1

NCSC-2024-0312 Kwetsbaarheden verholpen in Solarwinds Platform NCSC-NL (Netherlands) · Jul 18, 2024

References

https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm