CVE-2015-5371

High

Published: 06/07/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors.

Risk Assessment

Attackers could exploit this vulnerability to remotely execute malicious code, potentially leading to serious security breaches.

Recommendation

It is recommended to update SolarWinds Storage Manager to the latest version and implement appropriate security measures to restrict access to the AuthenticationFilter class.

Other vulnerabilities in SolarWinds Storage Manager

CVE-2015-7838High
ProcessFileUpload.jsp in SolarWinds Storage Manager before version 6.2 allows remote attackers to upload and execute arbitrary files via unspecified vectors.

Original NVD description (English source)

The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors.