CVE-2024-23465 | THREATINT

Assigner	SolarWinds
Reserved	2024-01-17
Published	2024-07-17
Updated	2024-08-01

Description

The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.

HIGH: 8.3

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-287 Improper Authentication

Product status

Default status

0x400308d7d0

previous versions

affected

Credits

Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative 0x400308d820

References

https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm

cve.org CVE-2024-23465

nvd.nist.gov CVE-2024-23465

Download JSON

https://cve.threatint.com/CVE/CVE-2024-23465

Subscribe to our newsletter to learn more about our work.