SolarWinds Access Rights Manager Authorization Issues Vulnerability (CNVD-2024-34985)

SolarWinds Access Rights Manager ARM is a tool for managing and monitoring user access rights. It helps organizations streamline the rights management process and improve security and compliance. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploit...

SolarWinds ARM < 2024.3 (arm_2024_3)

The version of SolarWinds ARM installed on the remote host is prior to 2024.3. It is, therefore, affected by multiple vulnerabilities as referenced in the arm2024-3 advisory, including the following: - The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution...

SolarWinds Access Rights Manager AddReportResult Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

This vulnerability allows remote attackers to read and delete arbitrary files on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AddReportResult method. The issue results from the lack of...

SolarWinds Access Rights Manager AddGeneratedReport Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

This vulnerability allows remote attackers to read and delete arbitrary files on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AddGeneratedReport method. The issue results from the lack...

SolarWinds Access Rights Manager ExpandZipFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ExpandZipFile method. The issue results from the lack of proper...

SolarWinds Access Rights Manager UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UserScriptHumster class. The issue results from an exposed dangerou...

SolarWinds Access Rights Manager ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ChangeHumster class. The issue results from an exposed dangerous...

SolarWinds Access Rights Manager deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

This vulnerability allows remote attackers to delete arbitrary files and disclose sensitive information on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the deleteTransferFile method. The...

CVE-2024-23474

creationtimestamp| type| source ---|---|--- 2024-07-17 18:13:08+00:00| seen| https://t.me/cvedetector/1087 2024-12-12 15:50:56+00:00| seen| https://www.thezdi.com/blog/2024/12/11/solarwinds-access-rights-manager-one-vulnerability-to-lpe-them-all 2024-12-12 22:01:59+00:00| seen|...

CVE-2024-23475

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information...

CVE-2024-23470

The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables...

CVE-2024-23470 SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability

The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables...

CVE-2024-23470

CVE-2024-23470 affects SolarWinds Access Rights Manager (ARM). A pre-authentication remote code execution vulnerability is described as an exposed dangerous method in the UserScriptHumster component, allowing an unauthenticated user to run commands/executables on the server. Related Nessus data c...

PT-2024-22664

Name of the Vulnerable Software and Affected Versions SolarWinds Access Rights Manager affected versions not specified Description The issue allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information due to a Directory Traversal and Information Disclosure...

SolarWinds Access Rights Manager 路径遍历漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A path traversal vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete arbitrary files and disclose sensitive information...

SolarWinds Access Rights Manager 路径遍历漏洞

SolarWinds Access Rights Manager is a tool for managing and auditing user access rights. A path traversal vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete critical files or access sensitive data...

CVE-2024-28993: Improper Limitation of a Pathname to a Restricted Directory

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information...

CVE-2024-28992: Improper Authentication

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information...

CVE-2024-28074: Deserialization of Untrusted Data

It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a different method to exploit the vulnerability...

CVE-2024-23475: Improper Limitation of a Pathname to a Restricted Directory

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information...