CVE-2016-3643

CVE Published 2016-06-17
Related Vendor(s) solarwinds
Related Product(s) virtualization_manager
Exploitation Reported (CISA KEV) 2021-11-03
CVSS 3 Base Score 7.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector LOCAL

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References