CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2021-35227
High (7.8) in solarwinds access rights manager. EPSS 0.5% chance of exploitation in the next 30 days.
The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-502, CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- solarwinds:access_rights_manager
References
- https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2021-4_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35227
- https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2021-4_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35227