CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-32076

Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTTP request and changing the referrer from the public IP address to the loopback.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 64.1%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2021-32076

Solarwinds » Web Help Desk » Version: N/A

cpe:2.3:a:solarwinds:web_help_desk:-
Solarwinds » Web Help Desk » Version: 12.1

cpe:2.3:a:solarwinds:web_help_desk:12.1
Solarwinds » Web Help Desk » Version: 12.4

cpe:2.3:a:solarwinds:web_help_desk:12.4
Solarwinds » Web Help Desk » Version: 12.4.2

cpe:2.3:a:solarwinds:web_help_desk:12.4.2
Solarwinds » Web Help Desk » Version: 12.5

cpe:2.3:a:solarwinds:web_help_desk:12.5
Solarwinds » Web Help Desk » Version: 12.5.1

cpe:2.3:a:solarwinds:web_help_desk:12.5.1
Solarwinds » Web Help Desk » Version: 12.5.2

cpe:2.3:a:solarwinds:web_help_desk:12.5.2
Solarwinds » Web Help Desk » Version: 12.6

cpe:2.3:a:solarwinds:web_help_desk:12.6
Solarwinds » Web Help Desk » Version: 12.7.0

cpe:2.3:a:solarwinds:web_help_desk:12.7.0
Solarwinds » Web Help Desk » Version: 12.7.1

cpe:2.3:a:solarwinds:web_help_desk:12.7.1
Solarwinds » Web Help Desk » Version: 12.7.2

cpe:2.3:a:solarwinds:web_help_desk:12.7.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-32076

Products

Pricing

Contact Us