CVE PROGRAM SOURCE RECORD8.0 High

CVE-2023-35180

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

Status: Published
Published: 2023-10-19
Updated: 2024-09-12
Assigning organization: SolarWinds

Description

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows authenticated users to abuse SolarWinds ARM API.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Access Rights Manager

Default version status: unaffected

previous versions to ≤ 2023.2.0.73affected

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-35180 ↗
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm ↗