CVE-2024-23475

Summary

CVE-2024-23475 is a newly disclosed vulnerability affecting SolarWinds Access Rights Manager. An unauthenticated user can exploit this Directory Traversal and Information Disclosure weakness. The exploit enables arbitrary file deletion and exfiltration of sensitive information, posing a significant risk to system security. This vulnerability underscores the importance of timely software updates and robust access control mechanisms.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.