SolarWinds ARM < 2023.2.3 Multiple Vulnerabilities (arm_2023-2-3)

The version of SolarWinds ARM installed on the remote host is prior to 2023.2.3. It is, therefore, affected by multiple vulnerabilities as referenced in the arm2023-2-3 advisory. - The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If...

CVE-2024-23478 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

SolarWinds Access Rights Manager ARM was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service, resulting in remote code execution...

CVE-2024-23478

CVE-2024-23478 affects SolarWinds Access Rights Manager (ARM). The connected advisories describe a deserialization/JsonSerializationBinder flaw that can allow an attacker to trigger remote code execution in ARM installations. The ZDI advisory specifies that authentication is required and attribut...