"Critical SolarWinds RCE Bugs Enable Unauthorized Network Takeover"

Eight recently discovered vulnerabilities in the SolarWinds Access Rights Manager Tool (ARM), including three of critical severity, could allow attackers to gain access to unpatched systems with the highest levels of privilege. SolarWinds occupies a sensitive position in corporate networks as a comprehensive Information Technology (IT) management platform. Administrators use the ARM tool to provision, manage, and audit user access rights to data, files, and systems. This tool exemplifies the platform's ability to oversee and impact critical corporate network components. This article continues to discuss SolarWinds' access controls containing five high-severity and three critical-severity security vulnerabilities. 

Dark Reading reports "Critical SolarWinds RCE Bugs Enable Unauthorized Network Takeover"

Submitted by grigby1