SolarWinds Access Rights Manager Path Traversal Vulnerability (CNVD-2024-36978)

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A path traversal vulnerability exists in SolarWinds Access Rights Manager that can be exploited by an attacker to remotely execute code...

SolarWinds Access Rights Manager Path Traversal Vulnerability (CNVD-2024-36977)

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A path traversal vulnerability exists in SolarWinds Access Rights Manager that can be exploited by an attacker to remotely execute code...

SolarWinds Access Rights Manager Path Traversal Vulnerability (CNVD-2024-36974)

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A path traversal vulnerability exists in SolarWinds Access Rights Manager that can be exploited by an attacker to remotely execute code...

SolarWinds Access Rights Manager Bypass Code Execution

The vulnerability of the SolarWinds Access Rights Manager ARM software relates to the possibility of bypassing the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

SolarWinds Access Rights Manager Code Execution

The vulnerability of the SolarWinds Access Rights Manager software-related access control tool is related to deficiencies in its deserialization mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

CVE-2024-23476

The SolarWinds Access Rights Manager ARM was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution...

CVE-2023-40057

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution...

PT-2024-1750 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The SolarWinds Access Rights Manager ARM is susceptible to a Directory Traversal Remote Code Execution issue. If exploited, this issue allows an unauthenticated use...

CVE-2023-40057: Deserialization of Untrusted Data

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution...

CVE-2024-23477: Improper Limitation of a Pathname to a Restricted Directory

The SolarWinds Access Rights Manager ARM was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution...

CVE-2024-23476: Improper Limitation of a Pathname to a Restricted Directory

The SolarWinds Access Rights Manager ARM was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution...

CVE-2024-23478: Deserialization of Untrusted Data

SolarWinds Access Rights Manager ARM was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service, resulting in remote code execution...

CVE-2024-23479: Improper Limitation of a Pathname to a Restricted Directory

SolarWinds Access Rights Manager ARM was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution...

PT-2024-1769

Name of the Vulnerable Software and Affected Versions SolarWinds Access Rights Manager affected versions not specified Description The issue is related to deficiencies in the deserialization mechanism of SolarWinds Access Rights Manager, allowing a remote attacker to execute arbitrary code. This...

PT-2024-4874 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to the use of dangerous methods or functions in the UserScriptHumster class of the SolarWinds Access Rights Manager. This allows an...

PT-2024-3889

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The SolarWinds Access Rights Manager contains a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability allows access to the...

SolarWinds Access Rights Manager Execute Action RCE

The vulnerability of the ExecuteAction function in the SolarWinds Access Rights Manager software lies in the possibility of unreliable data being restored to memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

CVE-2023-35186

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution...

CVE-2023-35182

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated users on SolarWinds ARM Server...

CVE-2023-35187: Improper Limitation of a Pathname to a Restricted Directory

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability allows an unauthenticated user to achieve the Remote Code Execution...