Lucene search
+L

306 matches found

Cvelist
Cvelist
added 2024/07/17 2:23 p.m.44 views

CVE-2024-28992 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information...

7.6CVSS0.01893EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/17 2:23 p.m.19 views

CVE-2024-28992 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information...

7.6CVSS6.8AI score0.01893EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/17 2:23 p.m.39 views

CVE-2024-23468 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information...

7.6CVSS0.03379EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/17 2:23 p.m.96 views

CVE-2024-23468

CVE-2024-23468 affects SolarWinds Access Rights Manager (ARM). The vulnerability is a Directory Traversal and Information Disclosure flaw that allows an unauthenticated attacker to delete arbitrary files and leak sensitive information. Root cause involves improper restrictions in file handling (e...

8.3CVSS7.8AI score0.03379EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/17 2:23 p.m.26 views

CVE-2024-23468 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information...

7.6CVSS6.8AI score0.03379EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/17 2:22 p.m.45 views

CVE-2024-23474 SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability...

7.6CVSS0.01515EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/17 2:22 p.m.88 views

CVE-2024-23474

CVE-2024-23474 affects SolarWinds Access Rights Manager (ARM). The issue is a Directory Traversal/Arbitrary File Deletion vulnerability in ARM that could leak information and allow deletion of arbitrary files. Exploitation could impact confidentiality, integrity, and availability (per NVD and acc...

8.8CVSS7.9AI score0.01515EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/07/17 12:00 a.m.19 views

SolarWinds Access Rights Manager 代码问题漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A deserialization vulnerability exists in versions of SolarWinds Access Rights Manager prior to 2024.3, which arises from unsafe deserialization processing of serialized data received by the application fr...

9.6CVSS7.4AI score0.10917EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/17 12:00 a.m.11 views

SolarWinds Access Rights Manager 路径遍历漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A path traversal vulnerability exists in SolarWinds Access Rights Manager that can be exploited by an attacker to arbitrarily read and delete files in ARM...

9.6CVSS6.7AI score0.18599EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/17 12:00 a.m.30 views

SolarWinds Access Rights Manager 授权问题漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to gain domain administrator access...

8.8CVSS7AI score0.01943EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/07/17 12:00 a.m.9 views

SolarWinds Access Rights Manager 路径遍历漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A path traversal vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete arbitrary files and disclose sensitive information...

8.3CVSS6.7AI score0.03379EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/17 12:00 a.m.17 views

SolarWinds Access Rights Manager 路径遍历漏洞

SolarWinds Access Rights Manager is a tool for managing and auditing user access rights. The product helps organizations monitor and manage user access rights to files, folders and shared resources. A path traversal vulnerability exists in SolarWinds Access Rights Manager that can be exploited by...

9.6CVSS7.3AI score0.02928EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/17 12:00 a.m.11 views

SolarWinds Access Rights Manager 授权问题漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete arbitrary files and obtain sensitive information...

8.3CVSS6.8AI score0.01893EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/17 12:00 a.m.15 views

SolarWinds Access Rights Manager 路径遍历漏洞

SolarWinds Access Rights Manager is a tool for managing and monitoring user access rights. A path traversal vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete arbitrary files and cause information disclosure...

8.8CVSS6.6AI score0.01515EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/17 12:00 a.m.11 views

SolarWinds Access Rights Manager 授权问题漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to abuse the SolarWinds service to remotely execute code...

9.6CVSS6.9AI score0.01344EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/06/03 12:00 a.m.12 views

The vulnerability of the SolarWinds Access Rights Manager software, which stems from the use of strictly encrypted credentials, allows a perpetrator to gain access to the RabbitMQ management console.

The vulnerability of the SolarWinds Access Rights Manager ARM lies in the use of strictly encrypted credentials. Exploiting this vulnerability could allow a malicious actor to gain access to the RabbitMQ management console remotely...

9CVSS7.5AI score0.01073EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/24 12:00 a.m.12 views

PT-2024-6218 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to a hard-coded credential authentication bypass vulnerability in SolarWinds Access Rights Manager ARM. If exploited, this vulnerability would...

9.8CVSS7.2AI score0.00474EPSS
SaveExploits0References19
CNVD
CNVD
added 2024/05/20 12:00 a.m.29 views

SolarWinds Access Rights Manager Trust Management Issue Vulnerability

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A trust management issue vulnerability exists in SolarWinds Access Rights Manager that can be exploited by an attacker to access the RabbitMQ management console...

9.8CVSS6.6AI score0.01073EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/05/20 12:00 a.m.30 views

SolarWinds ARM < 2023.2.4 (arm_2023-2-4)

The version of SolarWinds ARM installed on the remote host is prior to 2023.2.4. It is, therefore, affected by a vulnerability as referenced in the arm2023-2-4 advisory. - The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an...

9CVSS7.5AI score0.78028EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/05/15 12:00 a.m.24 views

SolarWinds Access Rights Manager JsonSerializationBinder Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

9.9CVSS7.7AI score0.78028EPSS
SaveExploits0References1
Rows per page
Query Builder