medium4.7
CVE-2021-35227
The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available.
Impact
The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Access Rights Manager | through 2020.2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2021-4_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35227
- https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2021-4_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35227