CVE-2021-35232 Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries

Medium 6.8 Published 27 Dec 2021 Updated 17 Sep 2024

Hardcoded credentials allow local attackers to execute arbitrary database queries, enabling theft of user password hashes or data modification.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-35232?

CVE-2021-35232 is a medium-severity vulnerability in SolarWinds Web Help Desk, published on 27 Dec 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users or insert arbitrary data into the database.

Weakness: CWE-798

Which versions are affected by CVE-2021-35232?

It affects 1 product.

Products include Solarwinds Webhelpdesk.

How do I fix CVE-2021-35232?

No fix has been published for CVE-2021-35232 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-35232 being exploited?

There is no known exploitation of CVE-2021-35232 in the wild and no public exploit code.

Sources

Also known as GHSA-34qh-79jp-wj3q.