CVE-2024-28990 SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability

Medium 6.3 Published 12 Sep 2024 Updated 12 Sep 2024

Hardcoded credentials allow attackers to bypass authentication and access the RabbitMQ management console in SolarWinds Access Rights Manager.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-28990?

CVE-2024-28990 is a medium-severity vulnerability in SolarWinds Access Rights Manager, published on 12 Sep 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console.

We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

Weakness: CWE-798

Which versions are affected by CVE-2024-28990?

It affects 1 product.

Products include Solarwinds Access Rights Manager.

How do I fix CVE-2024-28990?

No fix has been published for CVE-2024-28990 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-28990 being exploited?

There is no known exploitation of CVE-2024-28990 in the wild and no public exploit code.

Sources

Also known as GHSA-ggr8-prr7-mw8f.