userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2284
Reference (s):
- http://www.zerodayinitiative.com/advisories/ZDI-15-107/