CVE-2024-23471: SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability
The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Access Rights Managerto a version that resolves this vulnerability.Fixed in 2024.3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23471?
CVE-2024-23471 is classified as a critical severity vulnerability.
How do I fix CVE-2024-23471?
To fix CVE-2024-23471, users should upgrade to the latest version of SolarWinds Access Rights Manager beyond 2023.2.4.
Who is affected by CVE-2024-23471?
CVE-2024-23471 affects users of SolarWinds Access Rights Manager version 2023.2.4 and earlier.
What type of vulnerability is CVE-2024-23471?
CVE-2024-23471 is a Remote Code Execution vulnerability.
What can attackers do by exploiting CVE-2024-23471?
If exploited, CVE-2024-23471 allows an authenticated user to execute arbitrary code on the affected system.