{"id":"CVE-2024-23465","state":"PUBLISHED","title":"SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability","description":"The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.     ","publishedAt":"2024-07-17T14:27:31.092Z","updatedAt":"2024-08-01T23:06:24.653Z","severity":{"score":8.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","source":"SolarWinds"},"assigner":"SolarWinds","products":["SolarWinds Access Rights Manager"],"affected":[{"vendor":"SolarWinds","product":"Access Rights Manager","defaultStatus":"affected","versions":[{"version":"previous versions","status":"affected","lessThanOrEqual":"2023.2.4","versionType":"2024.3"}]}],"references":["https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm"],"weaknesses":["CWE-287"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/23xxx/CVE-2024-23465.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-23465","state":"PUBLISHED","datePublished":"2024-07-17T14:27:31.092Z","dateUpdated":"2024-08-01T23:06:24.653Z","assignerShortName":"SolarWinds","assignerOrgId":"49f11609-934d-4621-84e6-e02e032104d6","dateReserved":"2024-01-17T16:07:35.064Z"},"containers":{"cna":{"title":"SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability","descriptions":[{"lang":"en","value":"The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.     "}],"affected":[{"vendor":"SolarWinds","product":"Access Rights Manager","defaultStatus":"affected","versions":[{"version":"previous versions","status":"affected","lessThanOrEqual":"2023.2.4","versionType":"2024.3"}]}],"references":[{"url":"https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","description":"CWE-287 Improper Authentication","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"SolarWinds","orgId":"49f11609-934d-4621-84e6-e02e032104d6","dateUpdated":"2024-07-17T14:27:31.092Z"},"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative"}],"impacts":[{"capecId":"CAPEC-1","descriptions":[{"lang":"en","value":"CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"All SolarWinds Access Rights Manager customers are advised to upgrade to the latest version of the SolarWinds Access Rights Manager 2024.3<br>"}],"value":"All SolarWinds Access Rights Manager customers are advised to upgrade to the latest version of the SolarWinds Access Rights Manager 2024.3\n"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"solarwinds","product":"access_rights_manager","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"2023.2.4","versionType":"custom"}],"cpes":["cpe:2.3:a:solarwinds:access_rights_manager:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-19T03:55:31.743657Z","id":"CVE-2024-23465","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-19T15:52:58.074Z"}},{"title":"CVE Program Container","references":[{"url":"https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T23:06:24.653Z"}}]}}}