CVE-2024-23467: SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform remote code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Access Rights Managerto a version that resolves this vulnerability.Fixed in 2024.3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23467?
CVE-2024-23467 has been classified as a critical severity vulnerability due to its potential for remote code execution by unauthenticated users.
How do I fix CVE-2024-23467?
To fix CVE-2024-23467, update the SolarWinds Access Rights Manager to the latest version beyond 2023.2.4.
Who is affected by CVE-2024-23467?
Any organization using SolarWinds Access Rights Manager versions up to and including 2023.2.4 is affected by CVE-2024-23467.
What kind of vulnerability is CVE-2024-23467?
CVE-2024-23467 is a Directory Traversal and Information Disclosure vulnerability.
What can attackers do with CVE-2024-23467?
Attackers exploiting CVE-2024-23467 can perform remote code execution, potentially compromising the system and sensitive data.