CVE-2024-28999

This exploit leverages a race condition in SolarWinds Platform 2024.1 SR1 to bypass authentication by concurrently testing multiple passwords with pre-established sessions. It uses asynchronous requests to exploit the vulnerability.

This exploit leverages a race condition vulnerability in the SolarWinds Platform login page (CVE-2024-28999) to brute-force credentials by sending concurrent authentication requests with different passwords. It uses asyncio to exploit the race condition, potentially bypassing authentication limits.