Description
The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. While the DELETE method requests that the origin server removes the association between the target resource and its current functionality. Improper use of these methods may lead to a loss of integrity.
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| SolarWinds | Web Help Desk | 12.7.7 and previous versions 12.7.7 HF1 |
References
- https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-7-Hotfix-1-Release-Notes?language=en_USRelease Notes, Vendor Advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35243Vendor Advisory
- https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-7-Hotfix-1-Release-Notes?language=en_USRelease Notes, Vendor Advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35243Vendor Advisory
Timeline
- Published
- Dec 23, 2021
- Last modified
- Jun 17, 2026
- NVD status
- Modified