Description
SolarWinds Web Help Desk 是一款帮助客户自动执行关键帮助台票务管理任务的软件。SolarWinds Web Help Desk 软件受到硬编码凭证漏洞的影响，允许未经身份验证的远程用户访问内部功能并修改数据。
SolarWinds Web Help Desk 硬编码漏洞（CVE-2024-28987）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-28987
https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987
https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2
https://github.com/horizon3ai/CVE-2024-28987
https://horizon3.ai/attack-research/disclosures/cve-2024-28987-solarwinds-web-help-desk-hardcoded-credential-vulnerability-deep-dive/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28987
https://www.invicti.com/web-application-vulnerabilities/solarwinds-web-help-desk-hardcoded-credential-cve-2024-28987
https://thehackernews.com/2024/08/hardcoded-credential-vulnerability.html
https://www.tenable.com/plugins/nessus/206273
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=34881