RULE(RULE ID:338446)

Rule General Information
Release Date: 2024-09-29
Rule Name: SolarWinds Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987)
Severity:
CVE ID:
Rule Protection Details
Description: The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference: https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2
https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987
Solutions
Refer to the announcement or patch by the vendor: https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2