CVE-2024-28987

Summary

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

Affected Software

Weaknesses

• CWE-798: CWE-798 Use of Hard-coded Credentials

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: active
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28987

CVE Program Container

Additional References

• https://www.theregister.com/2024/08/22/hardcoded_credentials_bug_solarwinds_whd/

References

• https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987
• https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2

• ←Previous
• Next→