CVE-2024-28987 - SolarWinds Web Help Desk Hardcoded Credential Vulnerability
项目：SolarWinds
产品：Web Help Desk
添加日期：2024-10-15到期日：2024-11-05最后更新：June 21, 2025
漏洞名称
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
描述
SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.
已知用于勒索软件活动吗？
Unknown
采集行动
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
其他说明
https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987
https://nvd.nist.gov/vuln/detail/CVE-2024-28987
相关新闻文章
SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth BypassJanuary 29, 2026
SolarWinds fixes critical Web Help Desk RCE vulnerabilities, upgrade ASAP!January 29, 2026
SolarWinds Web Help Desk flaw is now exploited in attacksOctober 16, 2024
CISA Warns of Active Exploitation in SolarWinds Help Desk Software VulnerabilityOctober 16, 2024