CyberzSOC

These vulnerabilities, if exploited, could lead to authenticated remote code execution, and authentication bypass [1][2]. The vulnerability CVE-2024-28990, with a CVSS Score of 6.3, is a hard-coded credential authentication bypass flaw. If exploited, this vulnerability would allow access to the RabbitMQ The vulnerability CVE-2024-28991, with a CVSS Score of 9.0, is a deserialisation of untrusted data flaw that, if exploited, could lead to remote code execution on the affected server. These vulnerabilities affect SolarWinds Access Rights Manager (ARM) before the version CERT-EU strongly recommends updating software installations to a fixed version [1][2].