PT-2021-20854
CVE-2021-35232
·
تاريخ النشر
2021-12-27
·
تاريخ التحديث
2024-09-17
الوصف من
CVSS 3.1
6.8
متوسطةالمقاييسAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
SolarWinds Web Help Desk (affected versions not specified)
Description:
A security issue has been discovered in the SolarWinds Web Help Desk product, where hard-coded credentials allow an attacker with local access to the host machine to execute arbitrary HQL queries against the database. This enables the attacker to steal password hashes of users or insert arbitrary data into the database.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾