CVE-2016-3643

Timeline

Detection, updates, and resolution for this record.

1. Jun 17, 2016 · Catalog

   Detected

   SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. May 3, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."

Affected

• cpe solarwinds/virtualization managerversion unspecified
• vendor SolarWinds Virtualization Managerversion unspecified

Sources

• CISA KEVCVE-2016-3643

  SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo.

  cisa.gov
• CVE.orgCVE-2016-3643

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2016-3643

  30-day exploitation probability 3.7%

  first.org
• Exploit Database39967

  Public archive entry. The exploit body is not stored here.

  exploit-db.com
• NIST NVDCVE-2016-3643

  SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."

  nvd.nist.gov
• Packet Storm Securityhttp://packetstormsecurity.com/files/137487/Solarwinds-Virtualization-Manager-6.3.1-Privilege-Escalation.html

  Packet Storm link already published on the finding.

  packetstormsecurity.com

References

• Exploit · packetstormsecurity.com
• Mailing List · seclists.org
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov
• Exploit · exploit-db.com