Vulnerability Description
userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Solarwinds | Firewall Security Manager | <= 6.6.5 |
Related Weaknesses (CWE)
References
- http://www.zerodayinitiative.com/advisories/ZDI-15-107/Patch
- http://www.zerodayinitiative.com/advisories/ZDI-15-107/Patch
FAQ
What is CVE-2015-2284?
CVE-2015-2284 is a vulnerability with a CVSS score of 10.0 (HIGH). userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client sessio...
How severe is CVE-2015-2284?
CVE-2015-2284 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-2284?
Check the references section above for vendor advisories and patch information. Affected products include: Solarwinds Firewall Security Manager.