Lucene search
HistoryOct 19, 2023 - 3:15 p.m.
CVE-2023-35185
solarwinds
access rights manager
directory traversal
remote code vulnerability
system privileges
cve-2023-35185
6.8 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
39.9%
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability using SYSTEM privileges.
Affected configurations
Node
solarwindsaccess_rights_managerRange≤2023.2.0.73
Related
cve
cve
CVE-2023-35185
2023-10-19 15:15:09
prion
prion
Directory traversal
2023-10-19 15:15:00
zdi
zdi
cvelist
cvelist
thn
thn
Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities
2023-10-25 04:47:00
6.8 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
39.9%
Related for NVD:CVE-2023-35185