The vulnerability of the JsonSerializationBinder class in the SolarWinds Access Rights Manager (ARM) access control software allows a perpetrator to execute arbitrary code.

The vulnerability of the JsonSerializationBinder class in the SolarWinds Access Rights Manager ARM access control software is related to the restoration of unreliable data in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially created data...

PT-2024-6218 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to a hard-coded credential authentication bypass vulnerability in SolarWinds Access Rights Manager ARM. If exploited, this vulnerability would...

CVE-2024-29000

The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability...

CVE-2024-29000

The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability...

CVE-2024-29000 SolarWinds Platform Reflected XSS Vulnerability

The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability...

CVE-2024-29000 SolarWinds Platform Reflected XSS Vulnerability

The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability...

CVE-2024-29000

CVE-2024-29000 details a reflected cross-site scripting vulnerability in the SolarWinds Platform web console. The issue requires a high-privilege user and user interaction to trigger, and affects versions prior to 2024.1 (per PT-Security and Nessus references). The root cause is a client-side XSS...

SolarWinds Platform 跨站脚本漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A cross-site scripting vulnerability exists in SolarWinds Platform that stems from the Web console's susceptibility to cross-site scripting vulnerabilities...

SolarWinds ARM < 2023.2.4 (arm_2023-2-4)

The version of SolarWinds ARM installed on the remote host is prior to 2023.2.4. It is, therefore, affected by a vulnerability as referenced in the arm2023-2-4 advisory. - The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an...

SolarWinds Access Rights Manager Trust Management Issue Vulnerability

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A trust management issue vulnerability exists in SolarWinds Access Rights Manager that can be exploited by an attacker to access the RabbitMQ management console...

SolarWinds ARM < 2023.2.4 (2023-2-4_CVE-2024-23473)

The version of SolarWinds ARM installed on the remote host is prior to 2023.2.4. It is, therefore, affected by a vulnerability as referenced in the 2023-2-4 advisory. - The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If...

The vulnerability of the user interface of SolarWinds software for network monitoring and IT infrastructure management allows a hacker to perform cross-site scripting attacks.

The vulnerability of the user interface of SolarWinds Platform’s network monitoring and IT infrastructure management software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

SolarWinds Access Rights Manager Hard-Coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a RabbitMQ instance. The issue results from the use...

SolarWinds Access Rights Manager JsonSerializationBinder Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2024-28075

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating wit...

CVE-2024-28075

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating wit...

CVE-2024-23473

The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability allows access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating with...

CVE-2024-23473

The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability allows access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating with...

SolarWinds Access Rights Manager 代码问题漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds, Inc. A code issue vulnerability exists in versions of SolarWinds Access Rights Manager prior to 2023.2.4, which stems from susceptibility to remote code execution vulnerabilities...

SolarWinds Access Rights Manager 信任管理问题漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A trust management issue vulnerability exists in SolarWinds Access Rights Manager that can be exploited by an attacker to access the RabbitMQ management console...