Skip to content
OpenAdvisories
Critical · 9.0 CVE-2024-28991 EUVD-2024-26053GHSA-j4w6-9wmj-vfmv

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

Published Sep 12, 2024 · Updated Sep 17, 2024 · Assigned by SolarWinds

Description

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, resulting in remote code execution.

Affected products

VendorProductAffectedFixed
SolarWinds Access Rights Manager previous versions – ≤ 2024.3 —

Advisories 1

References