Product:
Web Help Desk
Summary
SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability. If exploited, this vulnerability could allow an unauthenticated attacker to gain access to certain restricted functionality. This poses a significant risk to the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.1 | CVE-2025-40536 |
Exploitation
To exploit this vulnerability, an attacker would need to leverage the security control bypass to gain unauthorized access to restricted functionalities within the Web Help Desk application. Given the high attack complexity, the attacker may need to craft specific requests to bypass security measures without requiring authentication.
Affected Products
- Web Help Desk: Affected by a security control bypass vulnerability allowing unauthorized access to restricted functionalities.
Mitigation
To mitigate this vulnerability, it is recommended that users apply the latest security updates provided by SolarWinds. Additionally, organizations should review their access controls and monitor for any unauthorized access attempts to enhance security.