SolarWinds Web Help Desk: hardcoded credential vulnerability (CVE-2024-28987) #shorts #breaking

CVE

This CVE, identified as CVE-2024-28987, pertains to a critical hardcoded credential vulnerability found in SolarWinds Web Help Desk software versions up to 12.8.3 Hotfix 1. Discovered two months ago, this zero-day vulnerability could potentially allow attackers unauthorized access to sensitive internal operations, facilitating data manipulation without prior authentication. The threat is especially concerning as attackers can use proof-of-concept tools to exploit this vulnerability, though specific attack details remain undisclosed. All users operating the affected versions should regard this vulnerability as a significant security risk.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987
• https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2