CVE-2024-23465

8.8 highEPSS 1.9%

High (8.8) in solarwinds access rights manager. EPSS 1.9% chance of exploitation in the next 30 days.

The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2024-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

solarwinds:access_rights_manager

References

https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm

Check your stack JSON