The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to the use of pre-installed user accounts, allows a hacker to disclose and alter sensitive information that is protected by the system.

🗓️ 30 Aug 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

SolarWinds Web Help Desk flaw from pre-installed accounts enables disclosure and modification of data.

Reporter	Title	Published	Views	Family All 28
GithubExploit	Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk	21 Apr 202519:44	–	githubexploit
GithubExploit	Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk	24 Sep 202418:12	–	githubexploit
GithubExploit	Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk	5 Sep 202409:01	–	githubexploit
GithubExploit	Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk	5 Sep 202409:01	–	githubexploit
ATTACKERKB	CVE-2024-28987	21 Aug 202400:00	–	attackerkb
Circl	CVE-2024-28987	22 Aug 202400:57	–	circl
CISA KEV Catalog	SolarWinds Web Help Desk Hardcoded Credential Vulnerability	15 Oct 202400:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	15 Oct 202412:00	–	cisa
CNNVD	SolarWinds Web Help Desk 信任管理问题漏洞	21 Aug 202400:00	–	cnnvd
CVE	CVE-2024-28987	21 Aug 202421:17	–	cve

Source	Link
solarwinds	www.solarwinds.com/trust-center/security-advisories/cve-2024-28987
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Oct 2024 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 39.1

CVSS 29.4

EPSS0.93159

SolarWinds Web Help Desk pre installed accounts data disclosure data modification vulnerability protected data