Critical Vulnerability Discovered in SolarWinds Web Help Desk

What changed

A newly discovered vulnerability in SolarWinds Web Help Desk has been reported, allowing unauthenticated AjaxProxy deserialization remote code execution. This vulnerability poses a significant risk as it enables attackers to execute commands on the host machine.

This issue is particularly concerning as it represents a patch bypass of previously identified vulnerabilities, namely CVE-2024-28988 and CVE-2024-28986. Organizations using affected versions of the software are urged to take immediate action.

Who is affected

The vulnerability primarily impacts users of SolarWinds Web Help Desk, which is widely utilized for IT service management.

Organizations relying on this software for customer support and ticketing systems are particularly at risk.

• SolarWinds Web Help Desk users
• IT departments using SolarWinds products
• Organizations with exposed web services relying on SolarWinds solutions

What to do

Affected organizations should prioritize assessing their current versions of SolarWinds Web Help Desk and apply any available patches or updates.

Additionally, implementing robust security measures to monitor for unusual activity can help mitigate potential exploitation.

• Review and update to the latest version of SolarWinds Web Help Desk
• Monitor network traffic for suspicious activities
• Educate staff about potential phishing attempts and social engineering tactics