CVE-2015-2284 in Firewall Security Manager

Summary

userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 03/11/2015
• Disclosure: 03/24/2015
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-264 (Confirmed)
• Exploit: Download
• CVSS: 10.0
• EPSS: 0.79875
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-2284
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-2284
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-2284/