coldbraid

CVE-2024-28987 SolarWinds Web Help Desk

SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.

CVSS
not scored

CWE-798

On CISA’s exploited list

SolarWinds Web Help Desk Hardcoded Credential Vulnerability

Added
2024-10-15
Federal patch deadline
2024-11-05
Ransomware use
not known