← Back to browse · API

CVE-2024-23472

Severity
CRITICAL
CVSS
9.6
EPSS
0.18599
Risk score
44.91
CISA KEV
No
PoC
No
Published
2024-07-17
Modified
2024-08-01
First seen
2026-08-08
Aliases
EUVD-2024-20970, GHSA-9G4R-89HX-HV6J
Products
SolarWinds:Access Rights Manager previous versions ≤2023.2.4
Sources
euvd EUVD-2024-20970

Description

SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.

References