Skip to content

CVE-2016-5709 SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute forc...

MediumCVSS 4.7 EPSS 1.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack.

Affected products

ProductAffected versionsFixed in
solarwinds virtualization manager <= 6.3.1 No fix listed

References