Lucene search
HistoryFeb 15, 2024 - 9:15 p.m.
CVE-2024-23477
solarwinds
access rights manager
directory traversal
remote code execution
vulnerability
unauthenticated user
CVSS3
9.6
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
8.5
Confidence
High
EPSS
0.002
Percentile
55.7%
The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.
Affected configurations
Node
solarwindsaccess_rights_managerRange<2023.2.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| solarwinds | access_rights_manager | * | cpe:2.3:a:solarwinds:access_rights_manager:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-23477
2024-02-15 21:15:09
vulnrichment
vulnrichment
prion
prion
Remote code execution
2024-02-15 21:15:00
cvelist
cvelist
zdi
zdi
nessus
nessus
SolarWinds ARM < 2023.2.3 Multiple Vulnerabilities (arm_2023-2-3)
2024-02-22 00:00:00
CVSS3
9.6
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
8.5
Confidence
High
EPSS
0.002
Percentile
55.7%
Related for NVD:CVE-2024-23477