漏洞描述 SolarWinds Web Help Desk 是一款帮助客户自动执行关键帮助台票务管理任务的软件。SolarWinds Web Help Desk 软件受到硬编码凭证漏洞的影响,允许未经身份验证的远程用户访问内部功能并修改数据。
相关漏洞推荐 SolarWinds Web Help Desk 未授权 反序列化漏洞 POC CVE-2018-19386: SolarWinds Database Performance Analyzer 11.1.457 - Cross-Site Scripting POC CVE-2020-10148: SolarWinds Orion API - Auth Bypass POC CVE-2021-35250: SolarWinds Serv-U 15.3 - Directory Traversal POC CVE-2024-0692: SolarWinds Security Event Manager - Unauthenticated RCE POC CVE-2024-28987: SolarWinds Web Help Desk - Hardcoded Credential POC CVE-2024-28995: SolarWinds Serv-U - Directory Traversal POC CVE-2020-10148: SolarWinds Orion Platform Authentication Bypass POC solarwinds-default-admin: SolarWinds Orion Default Login SolarWinds Web Help Desk 反序列化漏洞 可致远程代码执行 SolarWinds Web Help Desk 存在硬编码漏洞 SolarWinds Access Rights Manager 需授权 反序列化漏洞 SolarWinds Security Event Manager AMF CVE-2024-0692 不安全的反序列化漏洞