critical9.0

CVE-2024-28991

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability.

Impact

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, resulting in remote code execution.

Affected products

Vendor	Product	Affected versions
Solarwinds	Access Rights Manager	before 2024.3.1

Weakness classification

CWE-502

References

NVD record
CVE.org record
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3-1_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28991