SolarWinds Web Help Desk Hardcoded Credential Vulnerability

概要

参考情報

• support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2 · Release Notes
• solarwinds.com/trust-center/security-advisories/cve-2024-28987 · Vendor Advisory
• theregister.com/2024/08/22/hardcoded_credentials_bug_solarwinds_whd · Press/Media Coverage
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-28987

web help desk のその他の脆弱性

• CVE-2026-28323緊急 9.8SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication me…
• CVE-2026-28299高 7.5SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk s…
• CVE-2025-40554緊急 9.8SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker t…
• CVE-2025-40553緊急 9.8SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execu…
• CVE-2025-40552緊急 9.8SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious ac…