SolarWinds Access Rights Manager Vulnerable to Remote Code Execution
CVE-2023-40057

9CRITICAL

Key Information:

Vendor
Solarwinds
Status
Access Rights Manager
Vendor
CVE Published:
15 February 2024

Summary

The SolarWinds Access Rights Manager contains a vulnerability that can be exploited by authenticated users to perform remote code execution. This exploitation occurs through a specific service within the application, allowing attackers to execute arbitrary code on the server. Such a breach can lead to unauthorized access and control of sensitive systems, making it essential for organizations utilizing this software to apply the latest security patches and carefully manage user privileges.

Affected Version(s)

Access Rights Manager previous versions <= 2023.2.2

References

https://www.solarwinds.com/trust-center/security-advisori...

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Anonymous working with Trend Micro Zero Day Initiative
.