Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-23475: The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file d...

CVE-2024-23475 · published 2 years ago

Summary

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
solarwinds	access_rights_manager	<= 2023.2.4 `cpe:2.3:a:solarwinds:access_rights_manager::::::::`

Original advisory text

References

https://documentation.solarwinds.com/en/success_center/arm/content/release_notes... Release Notes

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

8.8 High

Exploitation

2% chance of attack within 30 days

Type

CWE-22Path Traversal

Timeline

Published17 Jul 2024

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2024-23475 · NVD

Track software like this

Free during beta