Skip to Main Content
Solarwinds header logo

  • Bring IT all together

    Customers rely on SolarWinds to drive operational resilience, from unified observability to enterprise-wide service management, through a simple, powerful, and secure portfolio built for hybrid IT.

    Platform OverviewPlatform Overview
    EXPLORE SOLARWINDS
    Interactive DemosPricingAbout UsSecure by DesignSolarWinds AI
    Monitoring and Observability

    World-class capabilities built for your hybrid IT ecosystem.

    NetworkInfrastructureDatabaseApplicationsDigital ExperienceLogsSecurity
    Monitoring and Observability Overview
    Database Observability

    Monitor, alert, triage, remediate, and prevent database issues from disrupting your business.

    MonitorDiagnoseOptimizeEverywhere
    Database Observability Overview
    Incident Response

    Build operational resilience and keep your systems online.

    Incident Response Overview
    IT Service Management

    Get teams back to work faster with an experience built for IT—and loved by users.

    Service ManagementAssets & CMDBAI & AutomationEnterprise Service Management
    IT Service Management Overview
    Not sure where to start?
    Get Expert GuidanceExplore ToolsRequest a QuoteVisit Our THWACK User Community

  • Respond even faster

    SolarWinds helps teams respond faster through AI-Powered observability, database performance, incident response, and ITSM solutions. Let our products work hard so you don’t have to.

    All ProductsAll Products
    EXPLORE SOLARWINDS
    Interactive DemosPricingAbout UsSecure By DesignSolarWinds AI
    Monitoring & Observability

    SolarWinds Observability Self-HostedSolarWinds Observability SaaSServer Application MonitorSecurity Event ManagerNetwork Performance MonitorNetFlow Traffic AnalyzerVirtualization ManagerNetwork Configuration ManagerIP Address ManagerAccess Rights Manager
    Database

    Database Performance AnalyzerSQL Sentry
    Incident Response

    SolarWinds Incident Response
    IT Service Management

    SolarWinds Service DeskWeb Help DeskDameware
    Tools

    Engineer's ToolsetKiwi Syslog ServerNetwork Topology MapperServ-U Managed File Transfer
    View Free Tools
    Not sure where to start?
    Get Expert GuidanceExplore ToolsRequest a QuoteVisit Our THWACK User Community

  • Discover our solutions to your IT challenges

    Whether you want to stay ahead with new tech, speed up modernization, support modular services, cut costs, or stay competitive, we’ve built industry-leading software to maximize hybrid IT, spark innovation, and tackle your toughest IT challenges.

    All SolutionsAll Solutions
    EXPLORE SOLARWINDS
    Interactive DemosPricingAbout UsSecure By DesignSolarWinds AI
    By Need

    Application Performance DevOpsIT Service ManagementNetwork Monitoring and ManagementCloud MigrationDigital Experience IT Asset ManagementUser Experience MonitoringDatabase ManagementInfrastructure MonitoringLog ManagementIT Automation
    By Technology

    AWSKubernetesPostgreSQLAzureMySQLSQL Server Diagnostics
    By Industry

    EducationPublic SectorEnterpriseSmall Business
    Partner Solutions

    Global System Integrators & MSPs
    View All Solutions
    Not sure where to start?
    Get Expert GuidanceExplore ToolsRequest a QuoteVisit Our THWACK User Community
  • Pricing

  • We’re here to help you.

    With award-winning technical support, extensive documentation, comprehensive training, and tons of educational assets, we’re dedicated to your success. Plus, you can connect directly with product experts in our user community of over 200,000 registered members.

    Get Expert GuidanceGet Expert Guidance
    EXPLORE SOLARWINDS
    Interactive DemosPricingAbout UsSecure By DesignSolarWinds AI
    Partners

    Program OverviewBecome A PartnerFind a PartnerPartner Portal Login
    Resource Center

    NewsroomInvestor RelationsSolarWinds BlogTrust CenterResourcesGDPR
    Services & Support

    Customer SuccessDeployment ServicesPremium SupportTechnical DocsRenew MaintenanceSolarWinds Academy: Training & CertificationTechnical SupportReport a Security Incident
    Community

    THWACK SolarWinds User CommunityEventsPartners
    Not sure where to start?
    Get Expert GuidanceExplore ToolsRequest a QuoteVisit Our THWACK User Community
Contact Us
Request Quote
Solarwinds header logo
Skip to Main Content
  • Pricing
  • Customer Portal
  • THWACK®
  • Events
  • SolarWinds Blog
  • Public Sector
  • Contact Us
SolarWinds Footer Logo

SolarWinds was founded by IT professionals solving complex problems in the simplest way, and we have carried that spirit forward since 1999. We take pride in relentlessly listening to our customers to develop a deeper understanding of the challenges they face. Our digital agility solutions are built to help companies of any size accelerate business transformation today and into the future.

Try SolarWinds
  • Free Product Trials
  • All Tools
  • Interactive Demos
  • Preference Center
Security
  • Trust Center
  • GDPR Resource Center
  • Secure by Design
  • Security Information
For Customers
  • Customer Portal
  • Support
  • Documentation
  • THWACK Community
About SolarWinds
  • Company
  • Careers
  • For Government
  • For Investors
Resources
  • SolarWinds Blog
  • Resource Center
  • Knowledge Hub
  • Gartner® Magic Quadrant™ Observability
Try SolarWinds
  • Legal Documents
  • Privacy
  • California Privacy Rights
  • Web Accessibility Statement

©2026 SolarWinds Worldwide, LLC. All rights reserved.

  2. Trust Center Index Page

  3. SolarWinds Trust Center Security Advisories | CVE-2024-23476

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability (CVE-2024-23476)

Summary

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution.

We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

Affected Products

  • SolarWinds Access Rights Manager (ARM) 2023.2.2 and prior versions

Fixed Software Release

  • SolarWinds Access Rights Manager (ARM) 2023.2.3

Acknowledgments

  • Anonymous working with Trend Micro Zero Day Initiative
Advisory Details
Severity
Critical
Advisory ID

CVE-2024-23476

First Published
02/06/2024
Last Updated
02/06/2024
Fixed Version

SolarWinds Access Rights Manager (ARM) 2023.2.3

CVSS Score

CVSS:9.6AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Download PDF
Send an Email