CVE-2024-28987

Description

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

Reserved 2024-03-13 | Published 2024-08-21 | Updated 2024-10-16 | Assigner SolarWinds

CISA Known Exploited Vulnerability

Date added 2024-10-15 | Due date 2024-11-05

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Problem types

CWE-798 Use of Hard-coded Credentials

Product status

Default status
affected

12.8.3 Hotfix 1 and previous versions
affected

Credits

Zach Hanley finder

References

www.solarwinds.com/...ter/security-advisories/cve-2024-28987

support.solarwinds.com/...inds-Web-Help-Desk-12-8-3-Hotfix-2

cve.org (CVE-2024-28987)

nvd.nist.gov (CVE-2024-28987)

Download JSON