PT-2024-5110 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information due to a Directory Traversal and Information Disclosure...

PT-2024-5112 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager ARM affected versions not specified Description: The issue is related to a Directory Traversal vulnerability, which allows an authenticated user to arbitrarily read and delete files in ARM. This is due to...

PT-2024-5109 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to an Arbitrary File Deletion and Information Disclosure vulnerability in the SolarWinds Access Rights Manager. This vulnerability is associate...

PT-2024-4876 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager ARM affected versions not specified Description: The issue is related to a Remote Code Execution vulnerability in the SolarWinds Access Rights Manager ARM. If exploited, this vulnerability allows an...

SolarWinds Access Rights Manager Hardcoded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a RabbitMQ instance. The issue results from the use...

CVE-2023-40058

Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager ARM if the threat actor is in the same environment...

CVE-2023-40058

Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager ARM if the threat actor is in the same environment...

Code injection

Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager ARM if the threat actor is in the same environment...

CVE-2023-40058 Sensitive Information Disclosure Vulnerability

Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager ARM if the threat actor is in the same environment...

CVE-2023-40058

CVE-2023-40058 relates to SolarWinds Access Rights Manager (ARM). The connected ZDI advisory documents a vulnerability in ARM that enables remote attackers to bypass authentication through misconfigurations in a RabbitMQ instance, specifically due to hard-coded credentials. This flaw allows unaut...

CVE-2023-40058 Sensitive Information Disclosure Vulnerability

Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager ARM if the threat actor is in the same environment...

PT-2023-27242 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: Sensitive data was added to a public-facing knowledgebase, which could be exploited to access components of Access Rights Manager ARM if the threat actor is in the...

SolarWinds Access Rights Manager Information Disclosure Vulnerability

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds, Inc. An information disclosure vulnerability exists in SolarWinds Access Rights Manager ARM versions 2023.2.1 and earlier, which stems from the presence of an information disclosure vulnerability...

The vulnerability of the GetParameterFormTemplateWithSelectionState function in the SolarWinds Access Rights Manager allows a violator to execute arbitrary code.

The vulnerability of the GetParameterFormTemplateWithSelectionState function in the SolarWinds Access Rights Manager software relates to the restoration of unreliable data in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the SolarWinds Access Rights Manager software lies in the incorrect restriction of the path name to the restricted directory. This allows a violator to execute arbitrary code.

The vulnerability of the SolarWinds Access Rights Manager software relates to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the SolarWinds Access Rights Manager software lies in the improper use of standard permissions, which allows a violator to increase their privileges.

The vulnerability of the SolarWinds Access Rights Manager software lies in the improper use of standard permissions. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the SolarWinds Access Rights Manager software lies in the improper use of standard permissions, which allows a violator to increase their privileges.

The vulnerability of the SolarWinds Access Rights Manager software lies in the improper use of standard permissions. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the ExecuteAction function in the SolarWinds Access Rights Manager allows a violator to execute arbitrary code.

The vulnerability of the ExecuteAction function in the SolarWinds Access Rights Manager software lies in the possibility of unreliable data being restored to memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the application software interface of the SolarWinds Access Rights Manager allows a violator to execute arbitrary code.

The vulnerability of the application software interface of the SolarWinds Access Rights Manager lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the TCP port 443 remotely...

The vulnerability of the SolarWinds Access Rights Manager software lies in the incorrect restriction of the path name to the restricted directory. This allows a violator to execute arbitrary code.

The vulnerability of the SolarWinds Access Rights Manager software relates to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...