high7.6
CVE-2024-28993
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
Impact
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Access Rights Manager | before 2024.3 |