CVE-2024-28991 — CRITICAL (9.0)

Q: How severe is CVE-2024-28991?

CVE-2024-28991 has been rated CRITICAL with a CVSS base score of 9.0/10. This is considered a critical vulnerability requiring immediate attention.

Q: Is there a patch for CVE-2024-28991?

Check the references section above for vendor advisories and patch information. Affected products include: Solarwinds Access Rights Manager.

Vulnerability Description

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, resulting in remote code execution.

CVSS Score

9.0

CRITICAL

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Solarwinds	Access Rights Manager	< 2024.3.1

Related Weaknesses (CWE)

CWE-502

References

https://documentation.solarwinds.com/en/success_center/arm/content/release_notesRelease Notes
https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28991Vendor Advisory

FAQ

What is CVE-2024-28991?

CVE-2024-28991 is a vulnerability with a CVSS score of 9.0 (CRITICAL). SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, re...

How severe is CVE-2024-28991?

CVE-2024-28991 has been rated CRITICAL with a CVSS base score of 9.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2024-28991?

Check the references section above for vendor advisories and patch information. Affected products include: Solarwinds Access Rights Manager.