CVE-2024-28992 | BDVDB-2026-242986 Detail
SolarWindsAccess Rights Manager
Description#
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
Impact#
CAPEC-37 Retrieve Embedded Sensitive Data
Weaknesses#
- CWE-287 Improper Authentication
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.