5
CVE-2008-6440
- EPSS 1.16%
- Veröffentlicht 06.03.2009 18:30:00
- Zuletzt bearbeitet 16.06.2026 23:02:13
- Erkennungen
LoginCerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the (1) /display and (2) /kb URIs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cerberus ≫ Cerberus Helpdesk Version 2.5
Webgroupmedia ≫ Cerberus Helpdesk Version <= 3.3
Webgroupmedia ≫ Cerberus Helpdesk Version 0.97.3
Webgroupmedia ≫ Cerberus Helpdesk Version 2.0
Webgroupmedia ≫ Cerberus Helpdesk Version 2.1
Webgroupmedia ≫ Cerberus Helpdesk Version 2.2
Webgroupmedia ≫ Cerberus Helpdesk Version 2.3
Webgroupmedia ≫ Cerberus Helpdesk Version 2.4
Webgroupmedia ≫ Cerberus Helpdesk Version 2.6.1
Webgroupmedia ≫ Cerberus Helpdesk Version 2.7
Webgroupmedia ≫ Cerberus Helpdesk Version 2.7.1 Update development_release
Webgroupmedia ≫ Cerberus Helpdesk Version 2.649
Webgroupmedia ≫ Cerberus Helpdesk Version 3.2
Webgroupmedia ≫ Cerberus Helpdesk Version 3.2.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.16% | 0.63 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
http://secunia.com/advisories/30344
http://www.cerb4.com/blog/2008/05/15/important-security-patch-40-build-599/
http://www.securityfocus.com/bid/29335