CVE-2024-23472: SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Access Rights Managerto a version that resolves this vulnerability.Fixed in 2024.3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23472?
CVE-2024-23472 is classified as a critical vulnerability due to its potential for unauthorized file access.
How do I fix CVE-2024-23472?
To mitigate CVE-2024-23472, upgrade SolarWinds Access Rights Manager to version 2024.3 or later.
Who is affected by CVE-2024-23472?
CVE-2024-23472 affects all authenticated users of SolarWinds Access Rights Manager versions up to 2023.2.4.
What type of vulnerability is CVE-2024-23472?
CVE-2024-23472 is a Directory Traversal vulnerability that allows file reading and deletion.
Can CVE-2024-23472 be exploited remotely?
CVE-2024-23472 requires authentication, meaning it cannot be exploited remotely without valid user credentials.