CVE-2016-3643
KEVSolarWinds Virtualization Manager Privilege Escalation Vulnerability
View CVE record →- Vendor / Project
- SolarWinds
- Product
- Virtualization Manager
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-264
Description
SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo.
Required action
Apply updates per vendor instructions.