CVE-2024-28993

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

Score

CVSS 3.1 8.3 High

Status

Analyzed - psirt@solarwinds.com

Published

2024-07-17

Last modified

2024-08-02

Weaknesses

CWE-22

Affected products

• Access Rights Manager (Solarwinds)

References

• https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm