NVD

Id
20916  
Name
CVE-2016-5709  
Description
SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-06-24  
Modified Date
2016-11-29  
Seq
2016-5709  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
113951 20916 CVE-2016-5709 http://packetstormsecurity.com/files/137525/Solarwinds-Virtualization-Manager-6.3.1-Weak-Crypto.html  View
113952 20916 CVE-2016-5709 20160616 CVE-2016-5709 - Use of Weak Encryption Algorithm in Solarwinds Virtualization Manager  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2554 JVNDB-2016-003327 SolarWinds Virtualization Manager におけるユーザパスワードを取得される脆弱性 SolarWinds Virtualization Manager は、/etc/shadow へのパスワードの保存に脆弱な暗号化を使用するため、ユーザパスワードを取得される脆弱性が存在します。 CVE-2016-5709 92215 CVE-2016-5709 20916 1.9 4.7 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003327.html 2016-06-14 2016-06-28 View