Critical Vulnerability in SolarWinds Access Rights Manager

SolarWinds has released security updates to address a critical vulnerability (CVE-2024-28991) affecting their Access Rights Manager (ARM). 

Successful exploitation of the vulnerability could allow an authenticated attacker to abuse the service and perform remote code execution. 

The vulnerability affects the following product versions:

• SolarWinds ARM 2024.3 and prior versions

Users and administrators of affected product versions are advised to update to the latest version immediately.

More information is available here:

https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28991

https://cybersecuritynews.com/solarwinds-arm-vulnerability/