SolarWinds Storage Manager AuthenticationFilter Authentication Bypass

An authentication bypass vulnerability exists in SolarWinds Storage Manager. The vulnerability is due to a flaw within the AuthenticationFilter class. A remote unauthenticated attacker could exploit this vulnerability by bypassing the authentication filter and uploading malicious scripts to the...

SolarWinds Log and Event Manager Static Credentials (CVE-2014-5504)

A policy bypass vulnerability has been reported in SolarWinds Log and Event Manager. The vulnerability is due to the usage of static/default credentials to access the HyperSQL database. A remote attacker can exploit this vulnerability to access the database with administrator privileges...

SolarWinds Storage Manager Authentication Bypass

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...

SolarWinds Storage Manager AuthenticationFilter RCE Vulnerability

SolarWinds Storage Manager is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SolarWinds Storage Manager - Authentication Bypass (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'SolarWinds Storage Manager Authentication Bypass', 'Description' = %q This module exploits an authentication bypass vulnerability in...

SolarWinds Storage Manager Authentication Bypass

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'SolarWinds Storage Manager Authentication Bypass', 'Description' = %q This module exploits an authentication bypass vulnerability in...

SolarWinds Storage Manager Authentication Bypass Exploit

This Metasploit module exploits an authentication bypass vulnerability in Solarwinds Storage Manager. The vulnerability exists in the AuthenticationFilter, which allows to bypass authentication with specially crafted URLs. After bypassing authentication, is possible to use a file upload function ...

CVE-2014-5504

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...

Design/Logic Flaw

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...

CVE-2014-5504

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...

CVE-2014-5504

SolarWinds Log and Event Manager pre-6.0.1 is affected by a HyperSQL authentication flaw due to static/default credentials, enabling a remote, unauthenticated attacker to execute arbitrary code in the database context. Some 6.0.0 instances may be unaffected; remediation is to upgrade to 6.0.1 or ...

CVE-2014-5504: Undefined Security Weakness

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...

SolarWinds Storage Resource Monitor / SolarWinds Storage Manager Detection (credentialed check)

Binary data solarwindsstoragemanagerinstalled.nbin...

SolarWinds Log and Event Manager Static Credential Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Log and Event Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the usage of HyperSQL. The issue lies in the usage of static...

SolarWinds Storage Manager < 5.7.2 Remote Code Execution

The remote host is running a version of SolarWinds Storage Manager prior to 5.7.2. It is, therefore, affected by a remote code execution vulnerability due to a flaw in the 'AuthenticationFilter' class. A remote, unauthenticated attacker can exploit this vulnerability to upload malicious scripts...

SolarWinds Storage Manager AuthenticationFilter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AuthenticationFilter class. The issue lies in the ability to subvert th...

SolarWinds Storage Manager Authentication Bypass

This module exploits an authentication bypass vulnerability in Solarwinds Storage Manager. The vulnerability exists in the AuthenticationFilter, which allows to bypass authentication with specially crafted URLs. After bypassing authentication, is possible to use a file upload function to achieve...

CVE-2014-3459

Heap-based buffer overflow in SolarWinds Network Configuration Manager NCM before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property...

Heap overflow

Heap-based buffer overflow in SolarWinds Network Configuration Manager NCM before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property...

CVE-2014-3459

The CVE-2014-3459 issue affects SolarWinds Network Configuration Manager (NCM) prior to version 7.3, where a heap-based buffer overflow in the PEstrarg1 property can be exploited to execute arbitrary code. The root cause is a failure to validate the input size before copying into a fixed-size hea...