|
|
|||
| Rule General Information |
|---|
| Release Date: | 2017-11-14 | |
| Rule Name: | Solarwinds Virtualization Manager Insecure Deserialization Vulnerability - 3 (CVE-2016-3642) | |
| Severity: | ||
| CVE ID: | ||
| CNNVD ID: | ||
| Rule Protection Details |
|---|
| Description: | An insecure deserialization vulnerability was found in Solarwinds Virtualization Manager. The vulnerability is caused by using the vulnerable version of Apache Commons Library in the classpath combined with insecure deserialization. | |
| Impact: | An attacker can abtain more privileges which he is not entitled to by exloiting the vulnerability, such as executing arbitrary code, deleting files, viewing sensitive information, changing configurations. | |
| Affected OS: | Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others | |
| Reference: | http://packetstormsecurity.com/files/137486/Solarwinds-Virtualization-Manager-6.3.1-Java-Deserialization.html |
|
| Solutions |
|---|
| No information about possible solutions is published. Please use an alternative product to substitude the affected software. |