Web Help Desk 12.7.8 Hotfix 2 Release Notes

4/6/2022 4:03 PM

4/15/2022 10:55 AM

This hotfix provides the following update:

• Prevents manipulation of the Database backup command. This command is now configured as the following JVM variable: DWHDdatabaseBackupCommand
• Adds access logs
• Addresses the Spring Framework Vulnerability

This hotfix modifies the following files in the <WebHelpDesk>/bin/webapps/helpdesk/WEB-INF/lib/ directory: 

• spring-aop.jar
• spring-beans.jar
• spring-context.jar
• spring-context-support.jar
• spring-core.jar
• spring-expression.jar
• spring-jcl.jar
• spring-jdbc.jar
• spring-jms.jar
• spring-messaging.jar
• spring-orm.jar
• spring-test.jar
• spring-tx.jar
• spring-web.jar
• spring-webmvc.jar
• whd-core.jar
• whd-persistence.jar
• whd-web.jar

This hotfix also modifies the following file in the <WebHelpDesk>/conf/ directory:

• tomcat_server_template.xml

This hotfix adds the following file to the <WebHelpDesk>/bin/tomcat/lib/ directory:

• logger.jar

This hotfix requires Web Help Desk 12.7.8.8471.

See SolarWinds Product Checksums for SHA256, SHA1, and MD5 values.

NOTE: In the installation instructions, <WebHelpDesk> represents the Web Help Desk home folder. The default home folders for the supported operating systems are listed below.

Operating System	Path
macOS	/Library/WebHelpDesk
Microsoft Windows	\Program Files\WebHelpDesk
Linux	/usr/local/webhelpdesk

 

SolarWinds CVEs

CVE-ID	Vulnerability Title	Description	Severity
CVE-2022-22965	Spring4Shell Vulnerability	Spring Framework remote code execution (RCE) vulnerability	Critical

Web Help Desk

Download this hotfix

1. Log in to the Web Help Desk server as an administrator.
2. Open a Web browser, navigate to the SolarWinds Customer Portal, and log in.
3. Click Downloads and select Hotfixes.
4. Click the View Hot Fixes for License drop-down menu and select Web Help Desk Per Seat License.
5. Download Web Help Desk v12.7.8 - Hot Fix 2.

Install this hotfix

1. Stop Web Help Desk.
2. Navigate to the following directory:
   • <WebHelpDesk>/bin/webapps/helpdesk/WEB-INF/lib/
3. Back up the following files to a separate directory:
   • spring-aop.jar
   • spring-beans.jar
   • spring-contect.jar
   • spring-context-support.jar
   • spring-core.jar
   • spring-expression.jar
   • spring-jcl.jar
   • spring-jdbc.jar
   • spring-jms.jar
   • spring-messaging.jar
   • spring-orm.jar
   • spring-test.jar
   • spring-tx.jar
   • spring-web.jar
   • spring-webmvc.jar
   • whd-core.jar
   • whd-persistence.jar
   • whd-web.jar
4. Copy the files included with this hotfix to the /lib directory, overwriting the following files:
   • spring-aop.jar
   • spring-beans.jar
   • spring-context.jar
   • spring-context-support.jar
   • spring-core.jar
   • spring-expression.jar
   • spring-jcl.jar
   • spring-jdbc.jar
   • spring-messaging.jar
   • spring-orm.jar
   • spring-test.jar
   • spring-tx.jar
   • spring-web.jar
   • spring-webmvc.jar
   • whd-core.jar
   • whd-persistence.jar
   • whd-web.jar
5. Navigate to the following directory:
   • <WebHelpDesk>/conf/
6. Back up the following files to a separate directory:
   • tomcat_server_template.xml
7. Copy the file included with this hotfix to the /conf directory, overwriting the following file:
   • tomcat_server_template.xml
8. Navigate to the following directory:
   • <WebHelpDesk/bin/tomcat/lib/
9. Copy the file included with this hotfix to the /bin/tomcat/lib directory:
   • logger.jar
10. Start Web Help Desk. The hotfix is installed.

Uninstall this hotfix

1. Stop Web Help Desk.
2. Navigate to the following directory:
   • <WebHelpDesk>/bin/webapps/helpdesk/WEB-INF/lib/
3. Copy your backup files to the /lib directory, overwriting the following files:
   • spring-aop-jar
   • spring-beans.jar
   • spring-context.jar
   • spring-context-support.jar
   • spring-core.jar
   • spring-expression.jar
   • spring-jcl.jar
   • spring-jdbc.jar
   • spring-jms.jar
   • spring-messaging.jar
   • spring-orm.jar
   • spring-test.jar
   • spring-tx.jar
   • spring-web.jar
   • spring-webmvc.jar
   • whd-core.jar
   • whd-persistence.jar
   • whd-web.jar
4. Navigate to the following directory:
   • <WebHelpDesk>/conf/
5. Copy your backup file to the /conf directory, overwriting the following file:
   • tomcat_server_template.xml
6. Start Web Help Desk. The hotfix is uninstalled.

For assistance, contact SolarWinds Technical Support.