What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2021-35243.

What is the severity of CVE-2021-35243?

The severity of CVE-2021-35243 is high, with a severity value of 7.5.

What is the affected software for CVE-2021-35243?

The affected software for CVE-2021-35243 is SolarWinds Web Help Desk version 12.7.7 and earlier.

How can the HTTP PUT and DELETE methods be dangerous?

The HTTP PUT method is used to upload data with a user-supplied URL, while the DELETE method requests the deletion of a specific resource, allowing potential misuse and unauthorized access.

Where can I find more information about CVE-2021-35243?

You can find more information about CVE-2021-35243 in the following references: [Link 1](https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-7-Hotfix-1-Release-Notes?language=en_US) and [Link 2](https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35243).

Vulnerability/
CVE-2021-35243

high

7.5

CWE

749

23/12/2021

16/9/2024

CVE-2021-35243: HTTP PUT & DELETE Methods Enabled

First published: Thu Dec 23 2021(Updated: )

The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. While the DELETE method requests that the origin server removes the association between the target resource and its current functionality. Improper use of these methods may lead to a loss of integrity.

Credit: psirt@solarwinds.com

Affected Software	Affected Version	How to fix
SolarWinds Web Help Desk	<=12.7.7

Remedy

Affected customers are advised to upgrade to 12.7.7 Hotfix 1 once it becomes available.

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-35243.
What is the severity of CVE-2021-35243?
The severity of CVE-2021-35243 is high, with a severity value of 7.5.
What is the affected software for CVE-2021-35243?
The affected software for CVE-2021-35243 is SolarWinds Web Help Desk version 12.7.7 and earlier.
How can the HTTP PUT and DELETE methods be dangerous?
The HTTP PUT method is used to upload data with a user-supplied URL, while the DELETE method requests the deletion of a specific resource, allowing potential misuse and unauthorized access.
Where can I find more information about CVE-2021-35243?
You can find more information about CVE-2021-35243 in the following references: [Link 1](https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-7-Hotfix-1-Release-Notes?language=en_US) and [Link 2](https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35243).

collector/nvd-index
agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/remedy
agent/title
agent/author
agent/severity
agent/weakness
agent/last-modified-date
agent/tags
agent/description
agent/first-publish-date
agent/event
vendor/solarwinds
canonical/solarwinds web help desk
version/solarwinds web help desk/12.7.7

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.