Описание
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
Ссылки
- Release NotesVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
EPSS
7.6 High
CVSS3
8.3 High
CVSS3
Дефекты
Связанные уязвимости
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
Уязвимость метода deleteTransferFile программного средства разграничения доступа SolarWinds Access Rights Manager (ARM), позволяющая нарушителю получить доступ на чтение, изменение или удаление данных и повысить свои привилегии
EPSS
7.6 High
CVSS3
8.3 High
CVSS3