CVE-2016-5709: SolarWinds Virtualization Manager

Medium severity, CVSS 4.7. EPSS: 1.4% chance of exploitation in the next 30 days.

SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack.

Affected products

• SolarWinds Virtualization Manager: up to and including 6.3.1

Published 2016-06-24. Last modified 2026-06-17.