CVE-2008-6440

Опубликовано: 06 мар. 2009

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the (1) /display and (2) /kb URIs.

Ссылки

http://secunia.com/advisories/30344
Vendor Advisory
http://www.cerb4.com/blog/2008/05/15/important-security-patch-40-build-599/
Vendor Advisory
http://www.securityfocus.com/bid/29335
http://secunia.com/advisories/30344
Vendor Advisory
http://www.cerb4.com/blog/2008/05/15/important-security-patch-40-build-599/
Vendor Advisory
http://www.securityfocus.com/bid/29335

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cerberus:cerberus_helpdesk:2.5:*:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:*:*:*:*:*:*:*:*

Версия до 3.3 (включая)

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:0.97.3:*:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.0:*:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.1:*:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.2:*:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.3:*:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.4:*:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.7:*:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.7.1:development_release:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.649:*:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:3.2:*:*:*:*:*:*:*

cpe:2.3:a:webgroupmedia:cerberus_helpdesk:3.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00282

Низкий

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-35wj-3f68-9hrj

github

больше 3 лет назад