First published: Tue Mar 24 2015(Updated: )
userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SolarWinds Firewall Security Manager | <=6.6.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-2284 has a high severity rating due to potential unauthorized access and privilege escalation.
To fix CVE-2015-2284, update SolarWinds Firewall Security Manager to version 6.6.5 HotFix1 or later.
CVE-2015-2284 is associated with remote code execution and privilege escalation vulnerabilities.
Yes, CVE-2015-2284 can be exploited by remote attackers through vulnerabilities in session handling.
CVE-2015-2284 affects SolarWinds Firewall Security Manager versions prior to 6.6.5 HotFix1.