CVE-2024-28075 | SolarWinds Access Rights Manager up to 2023.2.3 Service deserialization

A vulnerability was found in SolarWinds Access Rights Manager up to 2023.2.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Service. The manipulation leads to deserialization.

This vulnerability is known as CVE-2024-28075. The attack can only be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.