Title

SolarWinds Storage Manager 6.2 Remote Code Execution Vulnerability (Cat I impact)

Discussion

SolarWinds has released a security advisory addressing a vulnerability in Storage Manager Server. SolarWinds Storage Manager Server is an application that provides storage virtualization management. To exploit this vulnerability, an attacker would upload a malicious script to the affected application. If successfully exploited, the attacker would execute arbitrary code in the context of the affected application.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-62011

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.