Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Solarwinds Virtualization Manager 安全漏洞
Vulnerability Description
Solarwinds Virtualization Manager是美国SolarWinds公司的一套用于对虚拟化产品进行管理和监控的软件。该软件提供容量管理、性能监控和配置管理等功能。 SolarWinds Virtualization Manager 6.3.1及之前版本中存在安全漏洞，该漏洞源于程序使用弱加密算法在/etc/shadow中存储密码。本地攻击者可通过实施暴力破解攻击利用该漏洞以超级用户权限获取用户密码。
CVSS Information
N/A
Vulnerability Type
N/A