CVE-2024-23467: SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform remote code execution.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23467?
CVE-2024-23467 has been classified as a critical severity vulnerability due to its potential for remote code execution by unauthenticated users.
How do I fix CVE-2024-23467?
To fix CVE-2024-23467, update the SolarWinds Access Rights Manager to the latest version beyond 2023.2.4.
Who is affected by CVE-2024-23467?
Any organization using SolarWinds Access Rights Manager versions up to and including 2023.2.4 is affected by CVE-2024-23467.
What kind of vulnerability is CVE-2024-23467?
CVE-2024-23467 is a Directory Traversal and Information Disclosure vulnerability.
What can attackers do with CVE-2024-23467?
Attackers exploiting CVE-2024-23467 can perform remote code execution, potentially compromising the system and sensitive data.