Medium severity · published Dec 27, 2021
CVE-2021-35232
Hard coded credentials discovered in SolarWinds Web Help Desk product
6.1
CVSS
0.3%
EPSS
No
On KEV
Description
Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users or insert arbitrary data into the database.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Webhelpdesk · Solarwinds
through 12.7.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-35232
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-35232
Release Notes
https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-7-Hotfix-1-Release-Notes?language=en_US
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35232
More from Webhelpdesk
9.8
CVE-2024-28986
SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
9.1
CVE-2024-28987
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
8.8
CVE-2021-35254
SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk
7.8
CVE-2019-20002
Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help request form) that is…
6.5
CVE-2019-16959
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket