{"id":"CVE-2024-23466","title":"SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability","summary":"SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.  ","severity":"critical","cvss":9.6,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-22"],"vendor":"solarwinds","product":"access_rights_manager","affected":["access_rights_manager <= 2023.2.4"],"published":"2024-07-17","updated":"2026-11-03","sourceUpdated":"2026-11-03T22:17:14.823","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-23466","references":[{"url":"https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm","label":"psirt@solarwinds.com"},{"url":"https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2024-07-20T03:55:30.674550Z"},"epss":0.02539,"epssPercentile":0.8506,"ingestedAt":"2026-11-05T06:38:03.574Z","slug":"CVE-2024-23466","body":"## Overview\n\nSolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.  \n\n## Affected\n\n- `access_rights_manager <= 2023.2.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":52.8,"likelihood":0.5,"exploitation":0,"ransomware":0},"changes":[]}