Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4ww9-x3qp-vcwc

Опубликовано: 17 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

EPSS

Процентиль: 81%
0.01592
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.6
nvd
больше 1 года назад

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

CVSS3: 9.6
fstec
около 2 лет назад

Уязвимость метода CreateFile программного средства разграничения доступа SolarWinds Access Rights Manager (ARM), позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 81%
0.01592
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-287