Ref# ADV2024_247 | Date: Jul 19th 2024

---

SolarWinds has published a security advisory highlighting vulnerabilities in the following product on July 17th, 2024. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

• SolarWinds Access Rights Manager (ARM) – version 2023.2.4 and prior 

For more information on this update, you can follow these URLs: 

• SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability (CVE-2024-23471) 

• SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability (CVE-2024-23469) 

• SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability (CVE-2024-28074) 

• SolarWinds ARM Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability (CVE-2024-23472) 

• SolarWinds Security Vulnerabilities 

The Guyana National CIRT recommends that users and administrators review this update and apply it where necessary. 

PDF Download: SolarWinds Security Advisory

References 

• SolarWinds Security Vulnerabilities. (July 17th, 2024). Retrieved from SolarWinds. https://www.solarwinds.com/trust-center/security-advisories

• SolarWinds Security Advisory. (July 18th, 2024). Retrieved from Canadian Centre for Cyber Security. https://www.cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av24-406