---
id: 7766
title: "CVE-2024-28989: Weak Encryption Key Management in Solar Winds Web Help Desk"
cve: CVE-2024-28989
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/red-teaming/cve-2024-28989-weak-encryption-key-management-solar-winds-web-help-desk/"
published_at: "2025-03-10T00:00:00Z"
tags: ["encryption", "solarwinds", "aes-gcm", "web-help-desk", "cve-2024-28989", "password-recovery"]
phying_url: "https://phying.com/item/7766"
lang: en
---

# CVE-2024-28989: Weak Encryption Key Management in Solar Winds Web Help Desk

## Summary

CVE-2024-28989: SolarWinds Web Help Desk uses predictable AES-GCM keys—some static, some from a restricted keyspace—so an attacker with a backup file can recover stored passwords. Fixed in 12.8.5.

## Intelligence Metadata

- **Sources:** netspi.com
- **CVE:** CVE-2024-28989
- **Published:** 2025-03-10T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/red-teaming/cve-2024-28989-weak-encryption-key-management-solar-winds-web-help-desk/
- **Phying News:** https://phying.com/item/7766