Lucene search
HistoryNov 05, 2010 - 5:00 p.m.
CVE-2010-4184
cve-2010-4184
netsupport manager
nsm
sensitive information exposure
cleartext http headers
remote attackers
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.0%
NetSupport Manager (NSM) before 11.00.0005 sends HTTP headers with cleartext fields containing details about client machines, which allows remote attackers to obtain potentially sensitive information by sniffing the network.
Affected configurations
Node
netsupportsoftwarenetsupport_managerRange≤11.00
ORnetsupportsoftwarenetsupport_managerMatch5.00
ORnetsupportsoftwarenetsupport_managerMatch5.01
ORnetsupportsoftwarenetsupport_managerMatch5.02
ORnetsupportsoftwarenetsupport_managerMatch5.02_f1
ORnetsupportsoftwarenetsupport_managerMatch5.03
ORnetsupportsoftwarenetsupport_managerMatch5.05
ORnetsupportsoftwarenetsupport_managerMatch5.30
ORnetsupportsoftwarenetsupport_managerMatch5.31
ORnetsupportsoftwarenetsupport_managerMatch6.00
ORnetsupportsoftwarenetsupport_managerMatch6.10
ORnetsupportsoftwarenetsupport_managerMatch6.11
ORnetsupportsoftwarenetsupport_managerMatch7.01
ORnetsupportsoftwarenetsupport_managerMatch7.10
ORnetsupportsoftwarenetsupport_managerMatch8.00
ORnetsupportsoftwarenetsupport_managerMatch8.10
ORnetsupportsoftwarenetsupport_managerMatch8.50
ORnetsupportsoftwarenetsupport_managerMatch8.60
ORnetsupportsoftwarenetsupport_managerMatch9.00
ORnetsupportsoftwarenetsupport_managerMatch9.10
ORnetsupportsoftwarenetsupport_managerMatch9.50
ORnetsupportsoftwarenetsupport_managerMatch9.60
ORnetsupportsoftwarenetsupport_managerMatch10.00
ORnetsupportsoftwarenetsupport_managerMatch10.20
ORnetsupportsoftwarenetsupport_managerMatch10.30
ORnetsupportsoftwarenetsupport_managerMatch10.50
Related
prion
prion
Code injection
2010-11-05 17:00:00
nessus
nessus
NetSupport Manager Gateway HTTP Protocol Information Disclosure
2010-11-10 00:00:00
NetSupport Manager < 11.00.0005
2010-11-10 00:00:00
cvelist
cvelist
CVE-2010-4184
2010-11-05 16:28:00
nvd
nvd
CVE-2010-4184
2010-11-05 17:00:04
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.0%
Related for CVE-2010-4184