The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to the use of pre-installed user accounts, allows a hacker to disclose and alter sensitive information that is protected by the system.

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow an attacker to disclose and modify the protected information...

SolarWinds Web Help Desk < 12.8.3 HF 2 HardCoded Credentials

The version of SolarWinds Web Help Desk installed on the remote host is prior to 12.8.3 HF2. It is, therefore, affected by a hardcoded credential vulnerability, that, if exploited, would allow an attacker to run commands on the host machine. Note that Nessus has not tested for these issues but ha...

Hardcoded Credential Vulnerability Found in SolarWinds Web Help Desk

SolarWinds has issued patches to address a new security flaw in its Web Help Desk WHD software that could allow remote unauthenticated users to gain unauthorized access to susceptible instances. "The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowi...

SolarWinds Web Help Desk Backdoor (CVE-2024-28987)

This module exploits a backdoor in SolarWinds Web Help Desk use auxiliary/gather/solarwinds/webhelpdeskbackdoor msf undefinedwebhelpdeskbackdoor show actions ...actions... msf undefinedwebhelpdeskbackdoor set ACTION msf undefinedwebhelpdeskbackdoor show options ...show and set options... msf...

CVE-2024-28987

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data...

CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data...

SolarWinds Web Help Desk 信任管理问题漏洞

SolarWinds Web Help Desk is a suite of help desk and asset management software from SolarWinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and other features. A trust management issue vulnerability exists in SolarWinds Web Help Desk tha...

CVE-2024-28987

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. Recent assessments: sfewer-r7 at November 22, 2024 4:16pm UTC reported: SolarWinds Web Help Desk is described as an...

PT-2024-5815

Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk versions prior to 12.8.3 Hotfix 2 Description The SolarWinds Web Help Desk software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated users to access internal functionality and modify...

SolarWinds Releases Patch for Critical Flaw in Web Help Desk Software

SolarWinds has released patches to address a critical security vulnerability in its Web Help Desk software that could be exploited to execute arbitrary code on susceptible instances. The flaw, tracked as CVE-2024-28986 CVSS score: 9.8, has been described as a deserialization bug. "SolarWinds Web...

VulnCheck KEV: CVE-2024-28986

SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution...

SolarWinds Web Help Desk < 12.8.3 HF 1 Deserialization RCE

The version of SolarWinds Web Help Desk installed on the remote host is prior to 12.8.3 HF1. It is, therefore, affected by a remote code execution vulnerability, that, if exploited, would allow an attacker to run commands on the host machine. Note that Nessus has not tested for these issues but h...

CVE-2024-28986 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce...

CVE-2024-28986 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce...

SolarWinds Web Help Desk 代码问题漏洞

SolarWinds Web Help Desk is a suite of help desk and asset management software from US-based SolarWinds. The software supports centralized knowledge base, IT asset management, project and task management, and other features. A code issue vulnerability exists in SolarWinds Web Help Desk 12.8.3 and...

CVE-2024-28986

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it...

PT-2024-5811

Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk versions prior to 12.8.3 Hotfix 2 Description SolarWinds Web Help Desk is susceptible to a Java deserialization remote code execution issue. Exploitation of this issue could allow a malicious actor to execute arbitrary...

SolarWinds Web Help Desk <= 12.7.6 Arbitrary Code Execution

The version of SolarWinds Web Help Desk installed on the remote host is prior to or equal to 12.7.6. It is, therefore, affected by an arbitrary code execution vulnerability. Through hard coded credentials, an attacker with local access to the Web Help Desk host machine allows to execute arbitrary...

SolarWinds Web Help Desk Installed (Windows)

Binary data solarwindswebhelpdeskinstalled.nbin...

PT-2022-10456 · Solarwinds · Web Help Desk

Name of the Vulnerable Software and Affected Versions: WebHelpDesk affected versions not specified Description: The issue is related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent its misuse. Recommendations: At the moment, there is no...