PT-2015-1279 · Solarwinds · Solarwinds Firewall Security Manager

Andrea Micalizzi + 1 · Published 2015-03-13 · Updated 2015-03-25 · CVE-2015-2284

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SolarWinds Firewall Security Manager versions prior to 6.6.5 HotFix1

Description The issue allows a remote attacker to gain privileges and execute arbitrary code within the client session, related to client session handling in the userlogin.jsp module.

Recommendations For versions prior to 6.6.5 HotFix1, update to version 6.6.5 HotFix1 or later to resolve the issue. As a temporary workaround, consider restricting access to the userlogin.jsp module to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-10309

CVE-2015-2284

ZDI-15-107

Affected Products

Solarwinds Firewall Security Manager

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/solarwinds_fsm_userlogin.rb · Exploit
• 🔥 https://exploit-db.com/exploits/36679 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2284 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-15-107 · Patch
• https://bdu.fstec.ru/vul/2015-10309 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-107 · Security Note
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2284 · Note