PT-2024-5113 · Solarwinds · Solarwinds Access Rights Manager

Chudypb + 1 · Published 2024-01-17 · Updated 2024-09-10 · CVE-2024-23465

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager (affected versions not specified)

Description: The SolarWinds Access Rights Manager was found to have an authentication bypass issue, allowing an unauthenticated user to gain domain admin access within the Active Directory environment. This is due to weaknesses in the authentication procedure, potentially resulting from the use of dangerous methods or functions. An attacker could exploit this to bypass security restrictions and elevate their privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

CWE-749

Related Identifiers

BDU:2024-05640

CVE-2024-23465

ZDI-24-907

Affected Products

Solarwinds Access Rights Manager

References · 10

• https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-23465 · Security Note
• https://bdu.fstec.ru/vul/2024-05640 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-907 · Security Note
• https://osv.dev/vulnerability/CVE-2024-23465 · Vendor Advisory
• https://t.me/cvenotify/86523 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2024071915 · Note
• https://t.me/cvenotify/94064 · Telegram Post
• https://vuldb.com/ru/?id.271824 · Note
• https://t.me/cvedetector/1095 · Telegram Post