CVE-2015-2284

Name of the Vulnerable Software and Affected Versions SolarWinds Firewall Security Manager versions prior to 6.6.5 HotFix1

Description The issue allows a remote attacker to gain privileges and execute arbitrary code within the client session, related to client session handling in the userlogin.jsp module.

Recommendations For versions prior to 6.6.5 HotFix1, update to version 6.6.5 HotFix1 or later to resolve the issue. As a temporary workaround, consider restricting access to the userlogin.jsp module to minimize the risk of exploitation.