CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability Deep-Dive

CVE

CVE-2024-28987

Published

2024-09-25 10:18

Collected

2026-10-21 15:21

---
id: 10205
title: "CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability Deep-Dive"
cve: CVE-2024-28987
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/disclosures/cve-2024-28987-solarwinds-web-help-desk-hardcoded-credential-vulnerability-deep-dive/"
published_at: "2024-09-25T10:18:07Z"
tags: ["vulnerability-research"]
phying_url: "https://phying.com/item/10205"
lang: en
---

# CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability Deep-Dive

## Summary

CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability Deep-Dive and Indicators of Compromise. This blog details a hardcoded credentials vulnerability which allows an unauthenticated attacker to read and modify all help desk tickets.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2024-28987
- **Published:** 2024-09-25T10:18:07Z
- **Original:** https://horizon3.ai/attack-research/disclosures/cve-2024-28987-solarwinds-web-help-desk-hardcoded-credential-vulnerability-deep-dive/
- **Phying News:** https://phying.com/item/10205