SolarWinds ARM 2024.3.1 Multiple Vulnerabilities (2024-3-1)

The version of SolarWinds ARM installed on the remote host is prior to 2024.3.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024-3-1 advisory. - SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. ...

SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks

SolarWinds has released fixes to address two security flaws in its Access Rights Manager ARM software, including a critical vulnerability that could result in remote code execution. The vulnerability, tracked as CVE-2024-28991, is rated 9.0 out of a maximum of 10.0 on the CVSS scoring system. It...

The vulnerability of the SolarWinds Access Rights Manager software, which stems from the use of strictly encrypted credentials, allows a perpetrator to gain access to the RabbitMQ management console.

The vulnerability of the SolarWinds Access Rights Manager ARM lies in the use of strictly encrypted credentials. Exploiting this vulnerability could allow a malicious actor to gain access to the RabbitMQ management console remotely...

RHSA-2024:0217 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (rabbitmq-server) security update

Bulletin has no description...

RHSA-2022:8851 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (rabbitmq-server) security update

Bulletin has no description...

RHSA-2022:8867 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (rabbitmq-server) security update

Bulletin has no description...

RHSA-2020:0553 Red Hat Security Advisory: rabbitmq-server security update

Bulletin has no description...

RHSA-2020:0078 Red Hat Security Advisory: rabbitmq-server security update

Bulletin has no description...

RHSA-2017:0226 Red Hat Security Advisory: rabbitmq-server security update

Bulletin has no description...

RHSA-2017:0530 Red Hat Security Advisory: rabbitmq-server security and bug fix update

Bulletin has no description...

RHSA-2017:0531 Red Hat Security Advisory: rabbitmq-server security and bug fix update

Bulletin has no description...

RHSA-2017:0533 Red Hat Security Advisory: rabbitmq-server security update

Bulletin has no description...

RHSA-2017:0532 Red Hat Security Advisory: rabbitmq-server security and bug fix update

Bulletin has no description...

RHSA-2016:0368 Red Hat Security Advisory: rabbitmq-server security update

Bulletin has no description...

RHSA-2016:0369 Red Hat Security Advisory: rabbitmq-server security and bug fix update

Bulletin has no description...

RHSA-2016:0308 Red Hat Security Advisory: rabbitmq-server security and bugfix update

Bulletin has no description...

RHSA-2016:0367 Red Hat Security Advisory: rabbitmq-server security and bugfix update

Bulletin has no description...

SolarWinds Access Rights Manager Hard-Coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a RabbitMQ instance. The issue results from the use...

The vulnerability of the RabbitMQ message broker, related to insufficient protection of registration data, allows a hacker to access confidential information.

The vulnerability of the RabbitMQ messaging broker is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to access confidential information...

CVE-2024-28990

SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating...