CVE-2023-40057 — SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

CVE-2023-40057

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution PUBLISHED

Description (CNA)

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

Affected (CNA)

Vendor / product	Versions
SolarWinds / Access Rights Manager	affected previous versions through 2023.2.2

CWE

CWE-502

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40057

ADP enrichment

CVE

No English description supplied.

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40057

CISA-ADP

No English description supplied.

No references supplied.