CVE-2024-28074 — Vulnerability intelligence
solarwinds — access rights manager
Published:
- CVSS
- 9.6
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a different method to exploit the vulnerability.