CVE-2015-5371

EUVD-2015-5327
The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
Affected Products (NVD)
VendorProductVersion
solarwindsstorage_manager
-
𝑥
= Vulnerable software versions
References
http://www.securityfocus.com/bid/75515
http://www.zerodayinitiative.com/advisories/ZDI-15-275/
http://www.securityfocus.com/bid/75515
http://www.zerodayinitiative.com/advisories/ZDI-15-275/