Product:
Web Help Desk
Summary
SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that could allow access to administrative functions under certain situations. This vulnerability poses a significant risk as it can lead to unauthorized access and control over the system. The issue is particularly concerning due to the potential for high impact on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-40537 |
Exploitation
To exploit this vulnerability, an attacker would need to leverage the hardcoded credentials to gain unauthorized access to the administrative functions of the Web Help Desk. Given the high attack complexity and the requirement for network access, the attacker could potentially manipulate the system without user interaction, making it a serious threat.
Affected Products
- Web Help Desk: Affected by hardcoded credentials vulnerability allowing unauthorized administrative access.
Mitigation
To mitigate this vulnerability, it is recommended that users update to the latest version of Web Help Desk as soon as possible. Additionally, organizations should review their security policies and practices to ensure that hardcoded credentials are not used in their systems. Regular audits and monitoring can help identify and address potential security issues.