SolarWinds Web Help Desk Ticket Read (CVE-2024-28987)

Horizon3 PoC: default helpdeskIntegrationUser Basic auth on /helpdesk/WebObjects/Helpdesk.woa/ra/OrionTickets — data read only. !/usr/bin/env python3 -- coding: utf-8 -- """ CVE-2024-28987 — SolarWinds Web Help Desk hardcoded API credentials Horizon3. Auxiliary: reads Orion tickets via Basic auth...