Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2024-28989

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2024-28989.

Coverage Span: 2025-03-10
Reports: 1 related reports

Associated Reports & Timeline

CVE-2024-28989: Weak Encryption Key Management in Solar Winds Web Help Desk

CVE-2024-28989: SolarWinds Web Help Desk uses predictable AES-GCM keys—some static, some from a restricted keyspace—so an attacker with a backup file can recover stored passwords. Fixed in 12.8.5.