CVE-2016-3642 | BDVDB-2026-76544 Detail

Description#

The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/fulldisclosure/2016/Jun/25
http://seclists.org/fulldisclosure/2016/Jun/29
http://packetstormsecurity.com/files/137486/Solarwinds-Virtualization-Manager-6.3.1-Java-Deserialization.html

Exploit#

No public exploit known

History#

Version 12016-06-17Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.