CVE-2024-45709CWE-22

SolarWinds Web Help Desk Local File Read Vulnerability

Medium · published December 10, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00496 · 41.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-12-10T08:20Z
EPSS history
Timeline
  • 10 DEC 08:20Z
    SolarWinds Web Help Desk Local File Read Vulnerability
    cvelistv5