PT-2015-1279 · Solarwinds · Solarwinds Firewall Security Manager

Andrea Micalizzi + 1 · Publicado 2015-03-13 · Atualizado 2015-03-25 · CVE-2015-2284

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SolarWinds Firewall Security Manager versions prior to 6.6.5 HotFix1

Description The issue allows a remote attacker to gain privileges and execute arbitrary code within the client session, related to client session handling in the userlogin.jsp module.

Recommendations For versions prior to 6.6.5 HotFix1, update to version 6.6.5 HotFix1 or later to resolve the issue. As a temporary workaround, consider restricting access to the userlogin.jsp module to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2015-10309

CVE-2015-2284

ZDI-15-107

Produtos afetados

Solarwinds Firewall Security Manager

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/solarwinds_fsm_userlogin.rb · Exploit
• 🔥 https://exploit-db.com/exploits/36679 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2284 · Nota de Segurança
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2284 · Nota
• http://zerodayinitiative.com/advisories/ZDI-15-107 · Correção
• https://bdu.fstec.ru/vul/2015-10309 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-15-107 · Nota de Segurança