CVE-2016-3643: SolarWinds Virtualization Manager Privilege Escalation Vulnerability
SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."
Other sources
SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3643?
CVE-2016-3643 has a moderate severity rating due to the potential for privilege escalation.
How do I fix CVE-2016-3643?
To fix CVE-2016-3643, ensure proper configuration of the sudoers file and restrict access appropriately.
Who is affected by CVE-2016-3643?
CVE-2016-3643 affects users of SolarWinds Virtualization Manager versions 6.3.1 and earlier.
What type of vulnerability is CVE-2016-3643?
CVE-2016-3643 is a local privilege escalation vulnerability resulting from a misconfiguration of sudo.
Can CVE-2016-3643 be exploited remotely?
No, CVE-2016-3643 requires local access to the system for exploitation.