Skip to content
OpenAdvisories
High · 7.6 CVE-2024-28993 EUVD-2024-26055GHSA-hg5v-hmf4-qqh9

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

Published Jul 17, 2024 · Updated Aug 2, 2024 · Assigned by SolarWinds

Description

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

Affected products

VendorProductAffectedFixed
SolarWinds Access Rights Manager previous versions – ≤ 2023.2.4 —

Advisories 1

References