CVE-2024-28987

Description

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2024-28987
• https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987
• https://github.com/Darabium/CVE-2024-28987
• https://raw.githubusercontent.com/Darabium/CVE-2024-28987/main/cve-2024-28987.py
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-26049
• https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2