Vulnerability · Published Dec 10, 2024 · Assigned by SolarWinds
CVE-2024-45709SolarWinds Web Help Desk Local File Read Vulnerability
Medium 5.3
In plain English
A medium-severity path traversal in Web Help Desk from SolarWinds. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.5%top 57.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SolarWinds | Web Help Desk | 12.8.3 HF3 and previous versions |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N