SolarWinds ARM Vulnerable to Directory Traversal Remote Code Execution

CVE-2024-23477

Summary

The SolarWinds Access Rights Manager (ARM) is susceptible to a directory traversal vulnerability that facilitates remote code execution without authentication. By exploiting this vulnerability, an attacker can manipulate file paths to access restricted directories and execute arbitrary code on the server. This poses significant risks to the integrity and confidentiality of the system, allowing unauthorized users to gain control and potentially disrupt operations.

References