critical9.6
CVE-2024-23475
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
Impact
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Access Rights Manager | through 2023.2.4 |