Solwarwind's Web Help Desk: Malicious code can infect host system
A now closed critical security vulnerability threatened the customer support software Web Help Desk from Solarwinds.
![Update sign on table](https://heise.cloudimg.io/width/610/q85.png-lossy-85.webp-lossy-85.foil1/_www-heise-de_/imgs/18/4/6/5/2/3/0/8/shutterstock_1494931898-f9bd87b2d71bc629.jpeg)
(Image: Artur Szczybylo/Shutterstock.com)
Companies that manage customer problems with Solwarwind's Web Help Desk (WHD) should install the latest version as soon as possible. The developers have closed a vulnerability classified as"critical".
In a warning message, they write that the vulnerability (CVE-2024-28986) allows malicious code attacks on the host system. It is not yet clear how this could work in detail. Attacks should be able to take place without authentication. According to the developers, however, they have not been able to reproduce this. There are currently no reports of ongoing attacks.
Patch now!
To prevent attacks, admins must first install WHD 12.8.3 and then secure this version with 12.8.3 Hotfix 1. The developers explain how the update works in the warning message.
(des)