VDB
CVE-2024-23472
CVE-2024-23472
PUBLISHED
CVSS 9.600000381469727 CRITICAL
SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.
EPSS 7.46% · 91.9th percentile
Risk Scores
CVSS 3.1
9.600000381469727
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score
7.46%
91.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| solarwinds | access_rights_manager | 0, 0 |
| SolarWinds | Access Rights Manager | previous versions, previous versions |
| solarwinds | access_rights_manager | 0, 0, 0 |
Timeline
- Jul 17, 2024 CVE Published
- Jul 17, 2024 PoC Published
- Jul 18, 2024 EPSS Score
- Aug 1, 2024 CVE Updated
- Aug 9, 2024 EPSS Score
- Sep 21, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 13, 2024 EPSS Score
- Nov 25, 2024 EPSS Score
- Dec 18, 2024 EPSS Score
- Jan 9, 2025 EPSS Score
- Feb 21, 2025 EPSS Score
References
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23470 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23465 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23467 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23469 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23472 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23474 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23466 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28993 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28992 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23475 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28074 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23468 advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23471 advisory
- https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm url
- https://nvd.nist.gov/vuln/detail/CVE-2024-23472 advisory