CVE-2024-23472: SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
Published Jul 17, 2024
·Updated
SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.
Affected Software
1 affected component
SolarWinds Access Rights Manager<=2023.2.4
Remediation
Information
All SolarWinds Access Rights Manager customers are advised to upgrade to the latest version of the SolarWinds Access Rights Manager 2024.3
Event History
Jul 17, 2024
CVE Published
via MITRE·02:25 PM
Data Sourced
via MITRE·02:25 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 18, 2024
News Published
via BleepingComputer·03:51 PM
News Published
via BleepingComputer·03:52 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-23472?
CVE-2024-23472 is classified as a critical vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2024-23472?
To mitigate CVE-2024-23472, upgrade SolarWinds Access Rights Manager to version 2024.3 or later.
3
Who is affected by CVE-2024-23472?
CVE-2024-23472 affects all authenticated users of SolarWinds Access Rights Manager versions up to 2023.2.4.
4
What type of vulnerability is CVE-2024-23472?
CVE-2024-23472 is a Directory Traversal vulnerability that allows file reading and deletion.
5
Can CVE-2024-23472 be exploited remotely?
CVE-2024-23472 requires authentication, meaning it cannot be exploited remotely without valid user credentials.