CVE-2016-3643: SolarWinds Virtualization Manager Privilege Escalation Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 3.7% chance of exploitation in the next 30 days.

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."

Affected products

• SolarWinds Virtualization Manager: up to and including 6.3.1

Published 2016-06-17. Last modified 2026-06-17.