CPE Details
SolarWinds Web Help Desk 12.7.12 Hotfix1
12.7.12
2024-09-07
13h44 +00:00
13h44 +00:00
2024-09-07
13h44 +00:00
13h44 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:solarwinds:web_help_desk:12.7.12:hotfix1:*:*:*:*:*:*
Informations
Vendor
solarwindsProduct
web_help_deskVersion
12.7.12Update
hotfix1Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software. | 5.5 |
Moyen |
||
| SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited. | 5.5 |
Moyen |
||
| The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. | 9.1 |
Critique |
||
| SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing. However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available. | 9.8 |
Critique |
