CVE-2024-23466: SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Access Rights Managerto a version that resolves this vulnerability.Fixed in 2024.3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23466?
CVE-2024-23466 is classified as a critical vulnerability due to its potential for remote code execution with SYSTEM privileges.
How do I fix CVE-2024-23466?
To remediate CVE-2024-23466, upgrade SolarWinds Access Rights Manager to version 2023.2.5 or later.
Who is affected by CVE-2024-23466?
CVE-2024-23466 affects all installations of SolarWinds Access Rights Manager up to version 2023.2.4.
What type of vulnerability is CVE-2024-23466?
CVE-2024-23466 is a Directory Traversal vulnerability that can lead to remote code execution.
Can CVE-2024-23466 be exploited by authenticated users?
No, CVE-2024-23466 can be exploited by unauthenticated users, making it particularly dangerous.