SolarWinds Addresses Critical Web Help Desk Vulnerability

SolarWinds released a critical hotfix for Web Help Desk (WHD) to fix a vulnerability (CVE-2024-28987) allowing attackers to exploit hardcoded credentials and gain unauthorized access. The flaw, discovered by Zach Hanley from Horizon3.ai, lets attackers manipulate data on compromised systems. SolarWinds advises upgrading to WHD versions 12.8.3.1813 or 12.8.3 HF1 and applying the hotfix promptly, urging admins to back up files before installation to prevent potential issues. Read more...