PT-2023-6375

Name of the Vulnerable Software and Affected Versions SolarWinds Access Rights Manager affected versions not specified Description The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability allows an unauthenticated user to achieve...

SolarWinds Access Rights Manager OpenClientUpdateFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OpenClientUpdateFile method. The issue results from the lack of...

PT-2023-6351 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The SolarWinds Access Rights Manager is susceptible to a Remote Code Execution vulnerability. This issue allows authenticated users to abuse the SolarWinds ARM API,...

PT-2023-6352

Name of the Vulnerable Software and Affected Versions SolarWinds Access Rights Manager affected versions not specified Description The SolarWinds Access Rights Manager was susceptible to a Privilege Escalation issue. This issue allows users to abuse incorrect folder permission, resulting in...

CVE-2023-35180: Deserialization of Untrusted Data

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows authenticated users to abuse SolarWinds ARM API...

CVE-2023-35181: Incorrect Default Permissions

The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows users to abuse incorrect folder permission resulting in Privilege Escalation...

CVE-2023-35183: Incorrect Default Permissions

The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows authenticated users to abuse local resources to Privilege Escalation...

CVE-2023-35184: Deserialization of Untrusted Data

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse a SolarWinds service resulting in a remote code execution...

CVE-2023-35185: Improper Limitation of a Pathname to a Restricted Directory

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability using SYSTEM privileges...

CVE-2023-35186: Deserialization of Untrusted Data

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution...

CVE-2023-35187: Improper Limitation of a Pathname to a Restricted Directory

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability allows an unauthenticated user to achieve the Remote Code Execution...

PT-2023-6353

Name of the Vulnerable Software and Affected Versions SolarWinds Access Rights Manager affected versions not specified Description The issue is related to the deserialization of untrusted data in the ExecuteAction function of the SolarWinds Access Rights Manager, which can lead to remote code...

PT-2023-6291 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to the deserialization of untrusted data in the SolarWinds Access Rights Manager, which can lead to remote code execution. This can be exploite...

PT-2023-6350

Name of the Vulnerable Software and Affected Versions SolarWinds Access Rights Manager affected versions not specified Description The issue is related to incorrectly used default permissions in the SolarWinds Access Rights Manager, allowing authenticated users to abuse local resources for...