SolarWinds Web Help Desk Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in SolarWinds Web Help Desk. This vulnerability allows malicious actors to perform actions and access methods that should require authentication. The issue arises from a flaw in the application's authentication mechanism, which can be exploited to bypass security controls and gain unauthorized access to certain functionalities.

Impact

Exploitation of this vulnerability could lead to unauthorized access to actions and methods within the Web Help Desk application that are normally protected by authentication.

Remediation

Users can upgrade to SolarWinds Web Help Desk version 2026.1, which addresses this vulnerability. Instructions for downloading the update are available on the SolarWinds website and through the Customer Portal.