CVE-2024-28992CWE-287
SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
High · published July 17, 2024
What it is
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
The record
Technical detail
- CVSS v3.1
- 7.6 · HIGH
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.01893 · 79.4th percentile
- Weakness
- CWE-287 · Improper Authentication
- Published
- 2024-07-17T14:23Z
EPSS history
Timeline