The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution.
Credits
Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative
