critical9.6
CVE-2024-28074
It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager.
Impact
It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a different method to exploit the vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Access Rights Manager | through 2023.2.4 |