Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:SOLARWINDS-AUTH-BYPASS |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
SolarWinds Storage Manager AuthenticationFilter Authentication Bypass |
Release Date |
2014/11/24 |
Update Number |
2444 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: SolarWinds Storage Manager AuthenticationFilter Authentication Bypass
SolarWinds Storage Manager suffers from authentication bypass vulnerability. Successful exploitation could result in code execution under the context of the system.
Extended Description
The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors.
Affected Products
- Solarwinds storage_manager -
References
- BugTraq: 75515
- BugTraq: 69438
- CVE: CVE-2015-5371