CVE-2016-5709

CVE-2016-5709 affects SolarWinds Virtualization Manager 6.3.1 and earlier. The root cause is weak encryption of passwords stored in /etc/shadow, enabling a local attacker with superuser privileges to brute-force and obtain user passwords. Documented impact is local, with partial confidentiality e...