Description
It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a different method to exploit the vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | Access Rights Manager | previous versions – ≤ 2023.2.4 | — |
Advisories 1
- NCSC-2024-0312 Kwetsbaarheden verholpen in Solarwinds Platform NCSC-NL (Netherlands) · Jul 18, 2024