CVE-2016-3643

A sudo misconfiguration in SolarWinds Virtualization Manager allowed privilege escalation.

The vendor's own misconfigured sudo settings let attackers escalate privileges, proving that even well-known products can harbor avoidable flaws. DIBs must audit sudo configurations and patch known issues immediately, as this flaw was actively exploited in the wild.

Shame score — A misconfigured sudo setting is a classic, avoidable negligence that was actively exploited in the wild, showing a failure to secure a basic system component.