writeups.xyz / Solarwinds Web Help Desk: When the Helpdesk is too Helpful

Submitter : c2a

Date: 23 January 2022

Bounty : undisclosed

Vulnerabilities :

• Information Disclosure
• Hardcoded Credentials

Programs :

• SolarWinds

Authors :

• Assetnote Security Research Team (@Assetnote)

Link :
https://blog.assetnote.io/2022/01/23/solarwinds-webhelpdesk-hsql-eval-harcoded-creds/