SolarWinds Log and Event Manager < 6.2.0 Multiple Remote Command Execution Vulnerabilities

According to its self-reported version number, the SolarWinds Log and Event Manager installed on the remote host is prior to version 6.2.0. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the messagebroker/nonsecurestreamingamf service when using the traceroute...

CVE-2015-7839

SolarWinds Log and Event Manager LEM allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality...

CVE-2015-7839

CVE-2015-7839 affects SolarWinds Log and Event Manager (LEM). The vulnerability allows an unauthenticated, remote attacker to execute arbitrary commands on managed hosts via a request to the nonsecurestreamingamf endpoint under services/messagebroker, leveraging the traceroute functionality. Mult...