Description

SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

INFO

Published Date :

2024-09-12T13:16:35.586Z

Last Modified :

2024-09-12T19:10:59.173Z

Source :

SolarWinds
AFFECTED PRODUCTS

The following products are affected by CVE-2024-28990 vulnerability.

Vendors Products
Solarwinds
  • Access Rights Manager
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-28990.

URL Resource
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3-1_release_notes.htm cve-icon cve-icon
https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28990 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact