← Back to browse · API

CVE-2024-23478

Severity
HIGH
CVSS
8.0
EPSS
0.81588
Risk score
60.56
CISA KEV
No
PoC
No
Published
2024-02-15
Modified
2024-08-12
First seen
2026-08-07
Aliases
EUVD-2024-20976, GHSA-V49W-8X46-RGR6
Products
SolarWinds:Access Rights Manager, SolarWinds:Access Rights Manager previous versions ≤2023.2.2
Sources
euvd EUVD-2024-20976

Description

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service, resulting in remote code execution.

References