Skip to content
OpenAdvisories
High · 7.9 CVE-2024-23477 EUVD-2024-20975GHSA-4v5r-p2wq-3j8j

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

Published Feb 15, 2024 · Updated Aug 1, 2024 · Assigned by SolarWinds

Description

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.

Affected products

VendorProductAffectedFixed
SolarWinds Access Rights Manager previous versions – ≤ 2023.2.2 —

References