CRITICAL Published July 17, 2024

CVE-2024-23472

SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.

CVSS base score

9.6 (v3.1)

Severity

CRITICAL

Attack vector

Adjacent_network

Weakness

CWE-22

Last modified

November 3, 2026

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

solarwinds access rights manager

References

documentation.solarwinds.com Release Notes, Vendor Advisory
documentation.solarwinds.com Release Notes, Vendor Advisory

View full NVD advisory →

More solarwinds vulnerabilities

Published the same day

← Back to CVE watch

CVE-2024-23472

Affected products

References

More solarwinds vulnerabilities

Published the same day

Related reading