What is GHSA-gcc2-5vx5-63jr?

GHSA-gcc2-5vx5-63jr is a security advisory published by GitHub Security Advisories with Critical severity. SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code...

Which CVE IDs does GHSA-gcc2-5vx5-63jr cover?

GHSA-gcc2-5vx5-63jr covers the following CVE IDs: CVE-2024-23466. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gcc2-5vx5-63jr?

GHSA-gcc2-5vx5-63jr has a CVSS v3 base score of 9.6, published by GitHub Security Advisories.

GHSA-gcc2-5vx5-63jrCriticalCVSS 9.6

SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code...

Vendor

GitHub Security Advisories

Published

July 17, 2024

Last Modified

November 4, 2026

🔗 CVE IDs covered (1)

CVE-2024-23466 →

📋 Description

SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2024-23466
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
https://github.com/advisories/GHSA-gcc2-5vx5-63jr