CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 1.9
CWE Name:  Information Exposure
Summary: solarwinds virtualization manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2016-06-24
Last Modified Date: 2016-11-30