CVE-2024-23465: SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability
Published Jul 17, 2024
·Updated
The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.
Affected Software
1 affected component
SolarWinds Access Rights Manager<=2023.2.4
Remediation
Information
All SolarWinds Access Rights Manager customers are advised to upgrade to the latest version of the SolarWinds Access Rights Manager 2024.3
Event History
Jul 17, 2024
CVE Published
via MITRE·02:27 PM
Data Sourced
via MITRE·02:27 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 18, 2024
News Published
via BleepingComputer·03:51 PM
News Published
via BleepingComputer·03:52 PM
Jul 24, 57160
Event
via NVD·01:20 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-23465?
CVE-2024-23465 is considered a critical vulnerability as it allows unauthenticated users to gain domain admin access.
2
How do I fix CVE-2024-23465?
To fix CVE-2024-23465, upgrade the SolarWinds Access Rights Manager to version 2023.2.5 or later.
3
Which versions of SolarWinds Access Rights Manager are affected by CVE-2024-23465?
CVE-2024-23465 affects all versions of SolarWinds Access Rights Manager up to and including version 2023.2.4.
4
What type of vulnerability is CVE-2024-23465?
CVE-2024-23465 is categorized as an authentication bypass vulnerability.
5
Can an authenticated user exploit CVE-2024-23465?
No, CVE-2024-23465 can be exploited by unauthenticated users only.