Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
SolarWinds Web Help Desk Hardcoded Credential (CVE-2024-28987) - Vulnerability Database

SolarWinds Web Help Desk Hardcoded Credential (CVE-2024-28987)

Description

SolarWinds Web Help Desk has a hardcoded credential vulnerability. An unauthenticated attacker could gain access to the system, potentially allowing them to view sensitive information, manipulate data, and alter system configurations.

Remediation

Upgrade to the latest version of SolarWinds Web Help Desk.

References

Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987)

Related Vulnerabilities

Wing FTP Server RCE (CVE-2025-47812) Critical
Common tags: Known Vulnerabilities Authentication Bypass
URL rewrite vulnerability Medium
Common tags: Known Vulnerabilities Authentication Bypass
Ivanti vTM Auth bypass (CVE-2024-7593) Critical
Common tags: Known Vulnerabilities Authentication Bypass
Apache OFBiz Authentication Bypass (CVE-2023-51467) Critical
Common tags: Known Vulnerabilities Authentication Bypass
Apache OFBiz RCE (CVE-2024-32113/CVE-2024-36104/CVE-2024-38856) Critical
Common tags: Known Vulnerabilities Authentication Bypass

Severity

Critical

Classification

CVE-2024-28987
CWE-798
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Tags

Known Vulnerabilities
Authentication Bypass