[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVntSyKMrJSxPkTKwOTrn8-qfESUywPP6folhAjFMWp4":3,"g5a-risk:CVE-2021-32076":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":26,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":51,"references":52,"referencesCount":64,"weaknesses":65,"weaknessesCount":51,"isActivelyExploited":74,"cisaInfo":26,"otxData":26,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":110,"notableEvents":111},"CVE-2021-32076","What is CVE-2021-32076?","Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTTP request and changing the referrer from the public IP address to the loopback.","Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wiz...","2021-08-26T15:15:06.993","2024-01-25T21:34:02.087",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":33,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"psirt@solarwinds.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[34],{"Source":17,"Type":18,"CVSSData":35,"BaseSeverity":25,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":38,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":39,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,10,2.9,0.01172,[42,42,42,42,42,42,42],"Medium",[46],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"solarwinds","web_help_desk","*","cpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:*",1,[53,59],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F208278","Ibmcloud",[57,58],"Third Party Advisory","VDB Entry",{"url":60,"source":61,"tags":62},"https:\u002F\u002Fwww.solarwinds.com\u002Ftrust-center\u002Fsecurity-advisories\u002Fcve-2021-32076","Solarwinds",[63],"Vendor Advisory",2,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-290","Authentication Bypass by Spoofing","This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.","","Incomplete","Base","Simple",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2021-32076? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-32076, a medium severity cyber security vulnerability from 2021. Access Restriction Bypass via referrer spoof was discover...","CVE-2021-32076, CVE-2021-32076 vulnerability, CVE-2021-32076 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, solarwinds security, web_help_desk vulnerability","\u002Fwhat-is\u002Fcve-2021-32076",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-32076","Cybersecurity","CVE-2021-32076, CVE-2021-32076 vulnerability, CVE-2021-32076 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":26,"Negate":26,"Nodes":103},[104],{"Operator":105,"Negate":26,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":108,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":109},"8BD320EC-D33D-401B-96BF-0AE79432DDB3","12.7.2",[],[],{"lastModified":11,"cacheTime":113,"version":36},1793387604841,{"score":115,"band":116,"action":117,"scoredAt":118},30,"Low","Monitor","2026-10-30T06:52:22.140227+00:00"]