CVE-2024-23476: SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Access Rights Manager (ARM)to a version that resolves this vulnerability.Fixed in 2023.2.3
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-23476?
CVE-2024-23476 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-23476?
To fix CVE-2024-23476, users should upgrade their SolarWinds Access Rights Manager to version 2023.2.4 or later.
What allows an attacker to exploit CVE-2024-23476?
An attacker can exploit CVE-2024-23476 by leveraging a directory traversal flaw that enables unauthenticated remote code execution.
Which software is affected by CVE-2024-23476?
CVE-2024-23476 affects the SolarWinds Access Rights Manager version 2023.2.3 and earlier.
Is authentication required to exploit CVE-2024-23476?
No, CVE-2024-23476 can be exploited by unauthenticated users.