Back to search
CVE-2016-3642
Published: Jun 17, 2016
Modified: Aug 6, 2024
PUBLISHED
Description
The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20160615 Java Deserialization in Solarwinds Virtualization Manager 6.3.1
mailing-list
x_refsource_FULLDISC
20160615 CVE-2016-3642 - Java Deserialization in Solarwinds Virtualization Manager 6.3.1
mailing-list
x_refsource_FULLDISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now