CVE-2023-35186 — SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

Description (CNA)

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution.

Affected (CNA)

Vendor / product	Versions
SolarWinds / Access Rights Manager	affected previous versions through 2023.2.0.73

CWE

CWE-502

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-35186
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm

ADP enrichment

CVE

No English description supplied.

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-35186
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm

CISA-ADP

No English description supplied.

No references supplied.