Updates address eight critical and five high severity vulnerabilities

Threat ID:CC-4528

Threat Severity:Medium

Published:19 July 2024 2:41 PM

Summary

Affected platforms

The following platforms are known to be affected:

Versions: All prior to 2024.3

SolarWinds Access Rights Manager

Threat details

Introduction

SolarWinds has released thirteen security advisories that address eight critical and five high severity vulnerabilities. Some of these vulnerabilities relate to remote code execution (RCE), information disclosure, authentication bypass, and arbitrary file deletion.

Remediation advice

Affected organisations are encouraged to update to SolarWinds ARM 2024.3 and review the following advisories.

Remediation steps


Patch	SolarWinds Access Rights Manager Traversal and Information Disclosure Vulnerability (CVE-2024-23475) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23475
Patch	SolarWinds Access Rights Manager Traversal and Information Disclosure Vulnerability (CVE-2024-28992) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28992
Patch	SolarWinds Access Rights Manager Traversal and Information Disclosure Vulnerability (CVE-2024-23468) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23468
Patch	SolarWinds ARM Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability (CVE-2024-23472) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23472
Patch	SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability (CVE-2024-28074) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28074
Patch	SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability (CVE-2024-23469) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23469
Patch	SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability (CVE-2024-23465) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23465
Patch	SolarWinds Access Rights Manager Traversal and Information Disclosure Vulnerability (CVE-2024-28993) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28993
Patch	SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability (CVE-2024-23466) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23466
Patch	SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability (CVE-2024-23470) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23470
Patch	SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability (CVE-2024-23474) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23474
Patch	SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability (CVE-2024-23471) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23471
Patch	SolarWinds Access Rights Manager Traversal Remote Code Execution Vulnerability (CVE-2024-23467) https://www.solarwinds.com/trust-center/security-advisories/cve-2024-23467

Definitive source of threat updates

https://www.solarwinds.com/trust-center/security-advisories

CVE Vulnerabilities

StatusPublished

CVE-2024-23475The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

StatusPublished

CVE-2024-28992The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

StatusPublished

CVE-2024-23468The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

StatusPublished

CVE-2024-23472SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.

StatusPublished

CVE-2024-28074It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a different method to exploit the vulnerability.

StatusPublished

CVE-2024-23469SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.

StatusPublished

CVE-2024-23465The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.

StatusPublished

CVE-2024-23467The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform remote code execution.

StatusPublished

CVE-2024-28993The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

StatusPublished

CVE-2024-23466SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.

StatusPublished

CVE-2024-23470The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables.

StatusPublished

CVE-2024-23474The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability.

StatusPublished

CVE-2024-23471The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

Last edited: 19 July 2024 2:41 pm