CVE-2024-28992: SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28992?
CVE-2024-28992 is categorized as a high severity vulnerability due to its potential for arbitrary file deletion and information leakage.
How do I fix CVE-2024-28992?
To address CVE-2024-28992, upgrade the SolarWinds Access Rights Manager to version 2023.2.5 or later.
What types of attacks can CVE-2024-28992 enable?
CVE-2024-28992 can enable unauthenticated attackers to conduct arbitrary file deletion and access sensitive information on the affected system.
Who is affected by CVE-2024-28992?
CVE-2024-28992 affects users of SolarWinds Access Rights Manager versions up to and including 2023.2.4.
Can CVE-2024-28992 be exploited remotely?
Yes, CVE-2024-28992 can be exploited remotely, allowing unauthenticated users to gain access to sensitive data.