CVE-2024-23471

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.
Configurations

Configuration 1 (hide)

cpe:2.3:a:solarwinds:access_rights_manager:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:57

Type Values Removed Values Added
References () https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm - Release Notes () https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm - Release Notes
CVSS v2 : unknown
v3 : 9.8
v2 : unknown
v3 : 9.6

10 Sep 2024, 18:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 9.6
v2 : unknown
v3 : 9.8
References () https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm - () https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm - Release Notes
CPE cpe:2.3:a:solarwinds:access_rights_manager:*:*:*:*:*:*:*:*
First Time Solarwinds access Rights Manager
Solarwinds

18 Jul 2024, 12:28

Type Values Removed Values Added
Summary
  • (es) Se descubrió que SolarWinds Access Rights Manager era susceptible a una vulnerabilidad de ejecución remota de código. Si se explota, esta vulnerabilidad permite que un usuario autenticado abuse de un servicio de SolarWinds, lo que resulta en la ejecución remota de código.

17 Jul 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-17 15:15

Updated : 2024-11-21 08:57


NVD link : CVE-2024-23471

Mitre link : CVE-2024-23471

CVE.ORG link : CVE-2024-23471


JSON object : View

Products Affected

solarwinds

  • access_rights_manager
CWE
CWE-287

Improper Authentication