VDB
CVE-2024-23465
CVE-2024-23465
PUBLISHED
CVSS 8.300000190734863 HIGH
The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.
EPSS 0.03% · 10.3th percentile
Risk Scores
CVSS 3.1
8.300000190734863
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score
0.03%
10.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| solarwinds | access_rights_manager | 0, 0, 0 |
| SolarWinds | Access Rights Manager | previous versions, * |
| solarwinds | access_rights_manager | 0, 0 |
Timeline
- Jul 17, 2024 CVE Published
- Jul 17, 2024 PoC Published
- Jul 18, 2024 EPSS Score
- Aug 1, 2024 CVE Updated
- Aug 9, 2024 EPSS Score
- Aug 30, 2024 EPSS Score
- Sep 21, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 13, 2024 EPSS Score
- Nov 4, 2024 EPSS Score
- Nov 25, 2024 EPSS Score
- Dec 18, 2024 EPSS Score
References
- https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm url
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23470 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23465 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23467 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23469 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23472 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23474 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23466 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28993 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28992 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23475 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28074 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23468 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23471 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-23465 advisory