Vulnerabilities > CVE-2023-40057 - Deserialization of Untrusted Data vulnerability in Solarwinds Access Rights Manager

047910
CVSS 9.0 - CRITICAL
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
low complexity
solarwinds
CWE-502
critical

Summary

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

Common Weakness Enumeration (CWE)