{"id":"CVE-2024-23472","title":"SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability","summary":"SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary  read and delete files in ARM.","severity":"critical","cvss":9.6,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-22"],"vendor":"solarwinds","product":"access_rights_manager","affected":["access_rights_manager <= 2023.2.4"],"published":"2024-07-17","updated":"2026-11-03","sourceUpdated":"2026-11-03T22:17:15.457","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-23472","references":[{"url":"https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm","label":"psirt@solarwinds.com"},{"url":"https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2025-08-14T21:09:55.253510Z"},"epss":0.18599,"epssPercentile":0.97276,"ingestedAt":"2026-11-05T06:38:03.575Z","slug":"CVE-2024-23472","body":"## Overview\n\nSolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary  read and delete files in ARM.\n\n## Affected\n\n- `access_rights_manager <= 2023.2.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":57,"depthScoreParts":{"impact":52.8,"likelihood":3.7,"exploitation":0,"ransomware":0},"changes":[]}