Lucene search
HistoryJul 17, 2024 - 3:15 p.m.
CVE-2024-23472
solarwinds arm vulnerability
directory traversal
access rights manager
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.9%
SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.
Affected configurations
Node
solarwindsaccess_rights_managerRange≤2023.2.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| solarwinds | access_rights_manager | * | cpe:2.3:a:solarwinds:access_rights_manager:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2024-23472
2024-07-17 15:15:12
thn
thn
SolarWinds Patches 8 Critical Flaws in Access Rights Manager Software
2024-07-19 07:13:00
nessus
nessus
SolarWinds ARM < 24.3 (arm_2024_3)
2024-07-19 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.9%
Related for NVD:CVE-2024-23472