CVE-2024-28999— SolarWinds Platform Race Condition Vulnerability
Public Exploits 1
ExploitDB · 1 EDB-52055 [webapps]
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-28999
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SolarWinds Platform Race Condition Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
使用共享资源的并发执行不恰当同步问题(竞争条件)
Source: CVE Program / CVE List V5
Vulnerability Title
SolarWinds Platform 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SolarWinds Platform是美国SolarWinds公司的一个统一监控、可观察性和服务管理平台。 SolarWinds Platform存在安全漏洞，该漏洞源于容易受到影响Web控制台的竞争条件的攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SolarWinds | SolarWinds Platform | 2024.1.1 and previous versions | - |
II. Public POCs for CVE-2024-28999
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Exploit for CVE-2024-28999 SolarWinds Platform Race Condition Vulnerability - login page | https://github.com/HussainFathy/CVE-2024-28999 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-28999
请登录查看更多情报信息。
Other References for CVE-2024-28999 (2)
IV. Related Vulnerabilities
Same product: SolarWinds Platform
- CVE-2024-52611
SolarWinds Platform Information Disclosure Vulnerability - CVE-2024-52612
SolarWinds Platform Reflected Cross-Site Scripting Vulnerabi - CVE-2024-45717
SolarWinds Platform Cross- Site Scripting Vulnerability - CVE-2024-45715
SolarWinds Platform Edit Function Cross-Site Scripting Vulne - CVE-2024-45710
SolarWinds Platform Uncontrolled Search Path Element Local P
Same vendor: SolarWinds
- CVE-2024-29004
SolarWinds Platform Stored XSS Vulnerability - CVE-2024-28072
Arbitrary File Overwrite Vulnerability - CVE-2024-29003
SolarWinds Platform Cross Site Scripting Vulnerability - CVE-2024-29001
SolarWinds Platform SWQL Injection Vulnerability - CVE-2024-28076
SolarWinds Platform Arbitrary Open Redirection Vulnerability
Same weakness: CWE-362
- CVE-2026-55219
Paymenter: Race condition in payWithCredit() enables credit - CVE-2026-45712
Mailpit: Concurrent map read & write in proxy CSS rewriter - - CVE-2026-63756
SurrealDB before 3.1.0 Privilege Escalation via RPC Session - CVE-2026-16212
awesto django-shop Purchase Stock inventory.py race conditio - CVE-2026-16211
allegro Hostname Allocation assets.py AssetLastHostname.incr
V. Comments for CVE-2024-28999
No comments yet