SolarWinds Access Rights Manager Vulnerability Allows Unauthorized File Deletion and Information Disclosure

CVE-2024-28993

Summary

The SolarWinds Access Rights Manager is vulnerable to a directory traversal and information disclosure issue. This flaw enables an unauthenticated user to exploit the system by deleting arbitrary files and potentially accessing sensitive data. The exposure can lead to severe security breaches and unauthorized access to critical information, making it essential for organizations using this product to apply the necessary mitigations outlined in the release notes.

References