CVE-2024-28987

2024-08-2122:15:04

CWE-798

SolarWinds

web.nvd.nist.gov

solarwinds

whd

hardcoded credential

vulnerability

remote unauthenticated user

modify data

internal functionality

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

9.3

Confidence

High

EPSS

0.942

Percentile

99.2%

JSON

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "Web Help Desk",
    "vendor": "SolarWinds",
    "versions": [
      {
        "status": "affected",
        "version": "12.8.3 Hotfix 1 and previous versions"
      }
    ]
  }
]