Skip to content
OpenAdvisories
High · 8.0 CVE-2024-23478 EUVD-2024-20976GHSA-v49w-8x46-rgr6

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

Published Feb 15, 2024 · Updated Aug 12, 2024 · Assigned by SolarWinds

Description

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service, resulting in remote code execution.

Affected products

VendorProductAffectedFixed
SolarWinds Access Rights Manager previous versions – ≤ 2023.2.2 —

References