Vulnerability · Published Aug 26, 2021 · Assigned by SolarWinds

CVE-2021-32076Access Restriction bypass vulnerability via referrer spoof - Business Logic Bypass

Medium 5.3

In plain English

A medium-severity authentication bypass by spoofing in Web Help Desk from SolarWinds. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)1.2%top 32.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTTP request and changing the referrer from the public IP address to the loopback.

Affected products (as reported)

Vendor	Product	Versions
SolarWinds	Web Help Desk	unspecified – through 12.7.5

Weakness: CWE-290 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

https://www.solarwinds.com/trust-center/security-advisories/cve-2021-32076 x_refsource_MISC