CVE-2023-35185

Опубликовано: 19 окт. 2023

Источник: nvd

CVSS3: 6.8

EPSS Низкий

Описание

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability using SYSTEM privileges.

Ссылки

https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm
Release Notes
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-35185
Vendor Advisory
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm
Release Notes
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-35185
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:solarwinds:access_rights_manager:*:*:*:*:*:*:*:*

Версия до 2023.2.0.73 (включая)

EPSS

Процентиль: 36%

0.00151

Низкий

6.8 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

GHSA-h384-w7cx-vrph

CVSS3: 8.8

github

больше 2 лет назад