CVE-2024-23471: SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability
Published Jul 17, 2024
·Updated
The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.
Affected Software
1 affected component
SolarWinds Access Rights Manager<=2023.2.4
Remediation
Information
All SolarWinds Access Rights Manager customers are advised to upgrade to the latest version of the SolarWinds Access Rights Manager 2024.3
Event History
Jul 17, 2024
CVE Published
via MITRE·02:31 PM
Data Sourced
via MITRE·02:31 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 18, 2024
News Published
via BleepingComputer·03:51 PM
News Published
via BleepingComputer·03:52 PM
Jul 24, 57160
Event
via MITRE·01:20 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-23471?
CVE-2024-23471 is classified as a critical severity vulnerability.
2
How do I fix CVE-2024-23471?
To fix CVE-2024-23471, users should upgrade to the latest version of SolarWinds Access Rights Manager beyond 2023.2.4.
3
Who is affected by CVE-2024-23471?
CVE-2024-23471 affects users of SolarWinds Access Rights Manager version 2023.2.4 and earlier.
4
What type of vulnerability is CVE-2024-23471?
CVE-2024-23471 is a Remote Code Execution vulnerability.
5
What can attackers do by exploiting CVE-2024-23471?
If exploited, CVE-2024-23471 allows an authenticated user to execute arbitrary code on the affected system.