Sources
Additional media
Loading...

A critical vulnerability, CVE-2024-28987, has been disclosed by Horizon3Attack, affecting SolarWinds Web Help Desk. This hardcoded credential vulnerability allows remote attackers to read all help desk tickets, which often contain sensitive IT procedures such as user onboarding, password resets, and shared resource credentials. The proof of concept (PoC) for this vulnerability has been released by Horizon3ai, highlighting the potential risks for IT help desks used by various sectors, including government, education, and small to medium-sized businesses.