SolarWinds ARM < 2023.2.3 Multiple Vulnerabilities (arm_2023-2-3)

The version of SolarWinds ARM installed on the remote host is prior to 2023.2.3. It is, therefore, affected by multiple vulnerabilities as referenced in the arm2023-2-3 advisory. - The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If...

CVE-2024-23476

CVE-2024-23476 refers to a Directory Traversal Remote Code Execution vulnerability in SolarWinds Access Rights Manager (ARM). The accessible documents describe an unauthenticated path-traversal flaw that can lead to remote code execution with high impact (CVE metrics show a CRITICAL base score, 9...