Description

SolarWinds Web Help Desk has a hardcoded credential vulnerability. An unauthenticated attacker could gain access to the system, potentially allowing them to view sensitive information, manipulate data, and alter system configurations.

Remediation

Upgrade to the latest version of SolarWinds Web Help Desk.

References

Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987)

Related Vulnerabilities

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3528)

MySQL CVE-2015-0385 Vulnerability (CVE-2015-0385)

phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-9850)

OpenSSL Other Vulnerability (CVE-2014-3510)

SharePoint CVE-2021-26420 Vulnerability (CVE-2021-26420)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Tags

Known Vulnerabilities Authentication Bypass CWE-798 CVE-2024-28987