{"uuid": "5d5447e7-057d-4b52-b6d6-045a2721dc4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-5371", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solarwinds_store_manager_auth_filter.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authentication bypass vulnerability in Solarwinds Storage Manager.\\n          The vulnerability exists in the AuthenticationFilter, which allows to bypass authentication\\n          with specially crafted URLs. After bypassing authentication, is possible to use a file\\n          upload function to achieve remote code execution. This module has been tested successfully\\n          in Solarwinds Store Manager Server 5.1.0 and 5.7.1 on Windows 32 bits, Windows 64 bits and\\n          Linux 64 bits operating systems.\", \"disclosure_date\": \"2014-08-19\", \"fullname\": \"exploit/multi/http/solarwinds_store_manager_auth_filter\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"SolarWinds Storage Manager Authentication Bypass\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/solarwinds_store_manager_auth_filter.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/solarwinds_store_manager_auth_filter\", \"references\": [\"CVE-2015-5371\", \"ZDI-14-299\"], \"rport\": 9000, \"session_types\": false, \"targets\": [\"Solarwinds Store Manager <= 5.7.1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:12.071007Z"}