1. Home
  2. CVE Database
  3. CVE-2024-23465
HIGH · 8.3

CVE-2024-23465

The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Act...

Vulnerability Description

The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.  

CVSS Score

8.3

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SolarwindsAccess Rights Manager<= 2023.2.4

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2024-23465?

CVE-2024-23465 is a vulnerability with a CVSS score of 8.3 (HIGH). The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Act...

How severe is CVE-2024-23465?

CVE-2024-23465 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-23465?

Check the references section above for vendor advisories and patch information. Affected products include: Solarwinds Access Rights Manager.