CVE-2015-2284: Critical severity SolarWinds Firewall Security Manager vulnerability
userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Firewall Security Manager (FSM)to a version that resolves this vulnerability.Fixed in 6.6.5Patch HotFix1
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2284?
CVE-2015-2284 has a high severity rating due to potential unauthorized access and privilege escalation.
How do I fix CVE-2015-2284?
To fix CVE-2015-2284, update SolarWinds Firewall Security Manager to version 6.6.5 HotFix1 or later.
What type of vulnerabilities are associated with CVE-2015-2284?
CVE-2015-2284 is associated with remote code execution and privilege escalation vulnerabilities.
Can CVE-2015-2284 be exploited remotely?
Yes, CVE-2015-2284 can be exploited by remote attackers through vulnerabilities in session handling.
What software versions are affected by CVE-2015-2284?
CVE-2015-2284 affects SolarWinds Firewall Security Manager versions prior to 6.6.5 HotFix1.