CVE-2024-23466: Access Rights Manager: dizin geçişi

Açıklama (NVD)

SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.

Özet bilgiler

Ürün

Solarwinds Access Rights Manager

CVSS v3.1

8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%2,54 (yüzdelik 85)

CWE

CWE-22

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• documentation.solarwinds.com
• documentation.solarwinds.com
• CWE-22