CVE-2008-6440 Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the (...
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the (1) /display and (2) /kb URIs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cerberus helpdesk | = 2.5 | No fix listed |
| webgroupmedia cerberus helpdesk | <= 3.3 | No fix listed |
| webgroupmedia cerberus helpdesk | = 0.97.3 | No fix listed |
| webgroupmedia cerberus helpdesk | = 2.0 | No fix listed |
| webgroupmedia cerberus helpdesk | = 2.1 | No fix listed |
| webgroupmedia cerberus helpdesk | = 2.2 | No fix listed |
| webgroupmedia cerberus helpdesk | = 2.3 | No fix listed |
| webgroupmedia cerberus helpdesk | = 2.4 | No fix listed |
| webgroupmedia cerberus helpdesk | = 2.6.1 | No fix listed |
| webgroupmedia cerberus helpdesk | = 2.7 | No fix listed |
| webgroupmedia cerberus helpdesk | = 2.7.1-development_release | No fix listed |
| webgroupmedia cerberus helpdesk | = 2.649 | No fix listed |
| webgroupmedia cerberus helpdesk | = 3.2 | No fix listed |
| webgroupmedia cerberus helpdesk | = 3.2.1 | No fix listed |
References
- 30344 third-party-advisory vendor-advisory
- www.cerb4.com vendor-advisory
- 29335 vdb-entry