Medium severity · published Aug 26, 2021
CVE-2021-32076
Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2
5.3
CVSS
1.2%
EPSS
No
On KEV
Description
Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTTP request and changing the referrer from the public IP address to the loopback.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WH
Web Help Desk · Solarwinds
through 12.7.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-32076
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-32076
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/cve-2021-32076
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/208278
More from Web Help Desk
9.8
CVE-2025-40551
SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
9.8
CVE-2025-40536
SolarWinds Web Help Desk Security Control Bypass Vulnerability
9.8
CVE-2025-26399
SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
9.8
CVE-2024-28986
SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
9.1
CVE-2024-28987
SolarWinds Web Help Desk Hardcoded Credential Vulnerability