CVE-2024-23465: SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability
First published: Wed Jul 17 2024(Updated: )
The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.
Credit: psirt@solarwinds.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SolarWinds Access Rights Manager | <=2023.2.4 |
Remedy
All SolarWinds Access Rights Manager customers are advised to upgrade to the latest version of the SolarWinds Access Rights Manager 2024.3
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/title
- agent/weakness
- agent/remedy
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2024-23469
- alias/CVE-2024-23466
- alias/CVE-2024-23467
- alias/CVE-2024-28074
- alias/CVE-2024-23471
- alias/CVE-2024-23470
- alias/CVE-2024-23475
- alias/CVE-2024-23472
- alias/CVE-2024-23465
- agent/references
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/event
- agent/tags
- agent/trending
- vendor/solarwinds
- canonical/solarwinds access rights manager
- version/solarwinds access rights manager/2023.2.4