ZDI-24-351: SolarWinds Access Rights Manager OpenFileStreamLocal Directory Traversal Remote Code Execution Vulnerability | allinfosecnews.com

March 28, 2024, 5 a.m. |

ZDI: Published Advisories www.zerodayinitiative.com

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 10.0. The following CVEs are assigned: CVE-2024-23479.

access access rights arbitrary code attackers authentication code code execution cve cve-2024 cves cvss directory directory traversal exploit manager rating remote code remote code execution rights solarwinds solarwinds access rights manager vulnerability zdi

More from www.zerodayinitiative.com / ZDI: Published Advisories

ZDI-24-407: X.Org Server ProcRenderAddGlyphs Use-After-Free Local Privilege Escalation Vulnerability 1 day, 14 hours ago | www.zerodayinitiative.com

attacker attackers code cve +23

ZDI-24-406: Adobe After Effects AEP File Parsing Use-After-Free Remote Code Execution Vulnerability 1 day, 14 hours ago | www.zerodayinitiative.com

adobe adobe after effects aep after effects +18

ZDI-24-405: Lexmark CX331adwe IPP Server Authorization HTTP Header Heap-Based Buffer Overflow Remote Code Execution Vulnerability 1 day, 14 hours ago | www.zerodayinitiative.com

arbitrary code attackers authentication authorization +20

ZDI-24-415: (Pwn2Own) Oracle VirtualBox E1000 Uninitialized Memory Information Disclosure Vulnerability 1 day, 14 hours ago | www.zerodayinitiative.com

attacker attackers code cves +22

ZDI-24-414: (Pwn2Own) Oracle VirtualBox AHCI Controller Uninitialized Memory Information Disclosure Vulnerability 1 day, 14 hours ago | www.zerodayinitiative.com

attacker attackers code controller +22

ZDI-24-413: (Pwn2Own) Oracle VirtualBox DevVGA Out-Of-Bounds Write Local Privilege Escalation Vulnerability 1 day, 14 hours ago | www.zerodayinitiative.com

attacker attackers code cves +22

ZDI-24-412: (Pwn2Own) Oracle VirtualBox VirtIOCore Buffer Overflow Local Privilege Escalation Vulnerability 1 day, 14 hours ago | www.zerodayinitiative.com

attacker attackers buffer buffer overflow +23

ZDI-24-411: (Pwn2Own) Oracle VirtualBox BusLogic Uninitialized Memory Information Disclosure Vulnerability 1 day, 14 hours ago | www.zerodayinitiative.com

attacker attackers code cves +22

ZDI-24-410: Oracle VirtualBox vboxdrv Improper Privilege Management Local Privilege Escalation Vulnerability 1 day, 14 hours ago | www.zerodayinitiative.com

attacker attackers code cves +21

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Cybersecurity Engineer

@ Booz Allen Hamilton | USA, VA, Arlington (1550 Crystal Dr Suite 300) non-client

View on infosec-jobs.com

Invoice Compliance Reviewer

@ AC Disaster Consulting | Fort Myers, Florida, United States - Remote

View on infosec-jobs.com

Technical Program Manager II - Compliance

@ Microsoft | Redmond, Washington, United States

View on infosec-jobs.com

Head of U.S. Threat Intelligence / Senior Manager for Threat Intelligence

@ Moonshot | Washington, District of Columbia, United States

View on infosec-jobs.com

Customer Engineer, Security, Public Sector

@ Google | Virginia, USA; Illinois, USA

View on infosec-jobs.com