← Back to browse · API

CVE-2024-23479

Severity
CRITICAL
CVSS
9.6
EPSS
0.05793
Risk score
40.43
CISA KEV
No
PoC
No
Published
2024-02-15
Modified
2024-08-06
First seen
2026-08-07
Aliases
EUVD-2024-20977, GHSA-PP3F-X96V-FPCF
Products
SolarWinds:Access Rights Manager, SolarWinds:Access Rights Manager previous versions ≤2023.2.2
Sources
euvd EUVD-2024-20977

Description

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.

References