CVE-2024-28990
Medium
Description
SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.
SeverityMedium
CVSS6.3
Exploit probability—
Product
Solarwinds Access Rights Manager
PublishedSep 12, 2024
First seenSep 12, 2024
Weakness typeCWE-798Hard-coded credentials
How to fix
Update
- solarwinds access_rights_manager2024.3.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| solarwinds access_rights_manager | v < 2024.3.1 | 2024.3.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.