A proof-of-concept (PoC) exploit for the recently patched SolarWinds Web Help Desk vulnerability (CVE-2024-28987) has been released, allowing unauthenticated attackers to read and modify help desk ticket details. Discovered by Zach Hanley of Horizon3.ai, the flaw is due to hardcoded developer login credentials, which could facilitate unauthorized operations on the system. Administrators are urged to update their installations promptly, as there are still numerous exposed instances of the software online.
Relevant URL: https://www.helpnetsecurity.com/2024/09/25/cve-2024-28987-poc/
