SolarWinds left critical hardcoded credentials in its Web Help Desk product

stapp · Aug 23, 2024

SolarWinds left hardcoded credentials in its Web Help Desk product that can be used by remote, unauthenticated attackers to log into vulnerable instances, access internal functionality, and modify sensitive data
The software maker has now issued an update to address that critical oversight; its users are encouraged to install the fix, which presumably removes the baked-in creds.
Click to expand...

The hotfix patch, issued yesterday, has to be manually installed.
Click to expand...

https://www.theregister.com/2024/08/22/hardcoded_credentials_bug_solarwinds_whd/

Log in or Sign up

SolarWinds left critical hardcoded credentials in its Web Help Desk product

stapp Global Moderator

Log in or Sign up

SolarWinds left critical hardcoded credentials in its Web Help Desk product

stapp Global Moderator

Useful Searches