PT-2015-1279
CVE-2015-2284
·
تاريخ النشر
2015-03-13
·
تاريخ التحديث
2015-03-25
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
SolarWinds Firewall Security Manager versions prior to 6.6.5 HotFix1
Description
The issue allows a remote attacker to gain privileges and execute arbitrary code within the client session, related to client session handling in the userlogin.jsp module.
Recommendations
For versions prior to 6.6.5 HotFix1, update to version 6.6.5 HotFix1 or later to resolve the issue. As a temporary workaround, consider restricting access to the userlogin.jsp module to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾