CVE-2024-23473 SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability

High 8.6 Published 9 May 2024 Updated 1 Aug 2024

Hard-coded credentials allow attackers to bypass authentication and access the RabbitMQ management console in SolarWinds Access Rights Manager.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-23473?

CVE-2024-23473 is a high-severity vulnerability in SolarWinds Access Rights Manager, published on 9 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability allows access to the RabbitMQ management console.

We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

Weakness: CWE-798

Which versions are affected by CVE-2024-23473?

It affects 1 product.

Products include Solarwinds Access Rights Manager.

How do I fix CVE-2024-23473?

No fix has been published for CVE-2024-23473 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-23473 being exploited?

There is no known exploitation of CVE-2024-23473 in the wild and no public exploit code.

Sources

Also known as GHSA-48vf-pq83-g67j.