← Back to browse · API

CVE-2024-23476

Severity
CRITICAL
CVSS
9.6
EPSS
0.07138
Risk score
40.9
CISA KEV
No
PoC
No
Published
2024-02-15
Modified
2024-08-27
First seen
2026-08-07
Aliases
EUVD-2024-20974, GHSA-6928-MQ33-X3PC
Products
SolarWinds:Access Rights Manager, SolarWinds:Access Rights Manager previous versions ≤2023.2.2
Sources
euvd EUVD-2024-20974

Description

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution.

References