The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.

The remote host is affected by the vulnerability described in GLSA-201603-11 (Oracle JRE/JDK: Multiple vulnerabilities)

    Multiple vulnerabilities exist in both Oracle&rsquo;s JRE and JDK.  Please       review the referenced CVE&rsquo;s for additional information.
  Impact :

    Remote attackers could gain access to information, remotely execute       arbitrary code, and cause Denial of Service.
  Workaround :

    There is no known workaround at this time.

According to its self-reported version number, the SolarWinds Log and Event Manager installed on the remote host is prior to version 6.2.0.
It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in the messagebroker/nonsecurestreamingamf     service when using the traceroute functionality. An     unauthenticated, remote attacker can exploit this, via a     specially crafted request, to execute arbitrary commands     on managed hosts using the LEM agent connected to the     Log and Event Manager. (CVE-2015-7839)

  - A flaw exists in the command line management console     (CMC) related to the Ping feature. A remote attacker can     exploit this, by using specially crafted text in     response to the prompts, to open a bash shell, thus     allowing the execution of arbitrary commands.
    (CVE-2015-7840)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
89904	GLSA-201603-11 : Oracle JRE/JDK: Multiple vulnerabilities (Logjam)	Nessus	Gentoo Local Security Checks	low
86425	SolarWinds Log and Event Manager < 6.2.0 Multiple Remote Command Execution Vulnerabilities	Nessus	CGI abuses	high

Detections

Analytics

CVE-2015-7840

critical

Tenable Plugins

low

high