PT-2015-7638 · Solarwinds · Solarwinds Log & Event Manager

Publicado 2015-10-15 · Atualizado 2016-12-03 · CVE-2015-7840

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SolarWinds Log and Event Manager versions prior to 6.2.0

Description The issue allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature in the command line management console of the affected software.

Recommendations For versions prior to 6.2.0, update to version 6.2.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-7840

Produtos afetados

Solarwinds Log & Event Manager

Referências · 3

• https://security.gentoo.org/glsa/201603-11 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-7840 · Nota de Segurança
• http://solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm · Aviso do Fabricante