CVE Catalog
CVE-2016-3642
CriticalSummary
The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Risk Assessment
An attacker can exploit this vulnerability to execute remote code, potentially leading to system takeover and data leakage.
Recommendation
It is recommended to update SolarWinds Virtualization Manager to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.