CVE-2024-23465CWE-287

SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability

High · published July 17, 2024

CVSS v3.1
8.3
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01943 · 80.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-07-17T14:27Z
EPSS history
Timeline
  • 17 JUL 14:27Z
    SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability
    cvelistv5