CVE-2024-28989

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

CVE-2024-28989

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

CVE-2024-28989

creationtimestamp| type| source ---|---|--- 2025-02-11 07:21:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113984042828183491 2025-02-11 08:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhv7rhnhtv2z 2025-02-11 11:30:00+00:00| seen|...

CVE-2024-28989

CVE-2024-28989 affects SolarWinds Web Help Desk prior to version 12.8.5. The issue stems from a hardcoded cryptographic key, enabling disclosure of sensitive information (confidentiality impact HIGH) via a local attack with low privileges and no user interaction required. Remediation is to upgrad...