CVE-2024-23466: SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
Published Jul 17, 2024
·Updated
SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.
Affected Software
1 affected component
SolarWinds Access Rights Manager<=2023.2.4
Remediation
Information
All SolarWinds Access Rights Manager customers are advised to upgrade to the latest version of the SolarWinds Access Rights Manager 2024.3
Event History
Jul 17, 2024
CVE Published
via MITRE·02:28 PM
Data Sourced
via MITRE·02:28 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 18, 2024
News Published
via BleepingComputer·03:51 PM
News Published
via BleepingComputer·03:52 PM
Jul 24, 57160
Event
via MITRE·01:20 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-23466?
CVE-2024-23466 is classified as a critical vulnerability due to its potential for remote code execution with SYSTEM privileges.
2
How do I fix CVE-2024-23466?
To remediate CVE-2024-23466, upgrade SolarWinds Access Rights Manager to version 2023.2.5 or later.
3
Who is affected by CVE-2024-23466?
CVE-2024-23466 affects all installations of SolarWinds Access Rights Manager up to version 2023.2.4.
4
What type of vulnerability is CVE-2024-23466?
CVE-2024-23466 is a Directory Traversal vulnerability that can lead to remote code execution.
5
Can CVE-2024-23466 be exploited by authenticated users?
No, CVE-2024-23466 can be exploited by unauthenticated users, making it particularly dangerous.