CRITICAL Published July 17, 2024

CVE-2024-23467

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform remote code execution.

CVSS base score

9.6 (v3.1)

Severity

CRITICAL

Attack vector

Adjacent_network

Weakness

CWE-22

Last modified

November 4, 2026

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

solarwinds access rights manager

References

documentation.solarwinds.com Release Notes, Vendor Advisory
documentation.solarwinds.com Release Notes, Vendor Advisory

View full NVD advisory →

More solarwinds vulnerabilities

Published the same day

← Back to CVE watch

CVE-2024-23467

Affected products

References

More solarwinds vulnerabilities

Published the same day

Related reading