NVD

Id
19434  
Name
CVE-2016-3642  
Description
The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-06-17  
Modified Date
2016-06-20  
Seq
2016-3642  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107058 19434 CVE-2016-3642 http://packetstormsecurity.com/files/137486/Solarwinds-Virtualization-Manager-6.3.1-Java-Deserialization.html  View
107059 19434 CVE-2016-3642 20160615 Java Deserialization in Solarwinds Virtualization Manager 6.3.1  View
107060 19434 CVE-2016-3642 20160615 CVE-2016-3642 - Java Deserialization in Solarwinds Virtualization Manager 6.3.1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2513 JVNDB-2016-003286 SolarWinds Virtualization Manager の RMI サービスにおける任意のコマンドを実行される脆弱性 SolarWinds Virtualization Manager の RMI サービスには、Apache Commons Collections (ACC) ライブラリに関する処理に不備があるため、任意のコマンドを実行される脆弱性が存在します。 CVE-2016-3642 90148 CVE-2016-3642 19434 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003286.html 2016-06-01 2016-06-21 View