SolarWinds fixed hardcoded credential issue in Web Help Desk
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-28986 | Java Deserialization RCE in SolarWinds Web Help Desk | 9.8 | 85% | KEV | KEV |
| CVE-2024-28987 | Hardcoded Credential in SolarWinds Web Help Desk Allows Unauthenticated Access | 9.1 | 93% | KEV | KEV |
From the original article
1 min read at securityaffairs.com
SolarWinds fixed a hardcoded credential flaw in its Web Help Desk (WHD) software that could allow attackers to gain unauthorized access to vulnerable instances. SolarWinds has addressed a new security flaw, tracked as CVE-2024-28987 (CVSS score of 9. 1) in its Web Help Desk (WHD) software that could allow remote unauthenticated attackers to gain unauthorized access to vulnerable instances.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.