CVE-2021-35232

Katalog CVE

CVSS 6.1 · Medium EPSS 0,30%

Kerentanan Use of Hard-coded Credentials pada solarwinds webhelpdesk. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users or insert arbitrary data into the database.

Rincian

Terbit di NVD

27 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 21,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-7-Hotfix-1-Release-Notes?language=en... release notes · advisory vendor
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35232 advisory vendor