Lucene search

K
nvd[email protected]NVD:CVE-2008-6440
HistoryMar 06, 2009 - 6:30 p.m.

CVE-2008-6440

2009-03-0618:30:00
CWE-287
web.nvd.nist.gov
5

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

70.5%

Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for “controllers … that aren’t standard helpdesk pages,” possibly involving the (1) /display and (2) /kb URIs.

Affected configurations

Nvd
Node
cerberuscerberus_helpdeskMatch2.5
OR
webgroupmediacerberus_helpdeskRange3.3
OR
webgroupmediacerberus_helpdeskMatch0.97.3
OR
webgroupmediacerberus_helpdeskMatch2.0
OR
webgroupmediacerberus_helpdeskMatch2.1
OR
webgroupmediacerberus_helpdeskMatch2.2
OR
webgroupmediacerberus_helpdeskMatch2.3
OR
webgroupmediacerberus_helpdeskMatch2.4
OR
webgroupmediacerberus_helpdeskMatch2.6.1
OR
webgroupmediacerberus_helpdeskMatch2.7
OR
webgroupmediacerberus_helpdeskMatch2.7.1development_release
OR
webgroupmediacerberus_helpdeskMatch2.649
OR
webgroupmediacerberus_helpdeskMatch3.2
OR
webgroupmediacerberus_helpdeskMatch3.2.1
VendorProductVersionCPE
cerberuscerberus_helpdesk2.5cpe:2.3:a:cerberus:cerberus_helpdesk:2.5:*:*:*:*:*:*:*
webgroupmediacerberus_helpdesk*cpe:2.3:a:webgroupmedia:cerberus_helpdesk:*:*:*:*:*:*:*:*
webgroupmediacerberus_helpdesk0.97.3cpe:2.3:a:webgroupmedia:cerberus_helpdesk:0.97.3:*:*:*:*:*:*:*
webgroupmediacerberus_helpdesk2.0cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.0:*:*:*:*:*:*:*
webgroupmediacerberus_helpdesk2.1cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.1:*:*:*:*:*:*:*
webgroupmediacerberus_helpdesk2.2cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.2:*:*:*:*:*:*:*
webgroupmediacerberus_helpdesk2.3cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.3:*:*:*:*:*:*:*
webgroupmediacerberus_helpdesk2.4cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.4:*:*:*:*:*:*:*
webgroupmediacerberus_helpdesk2.6.1cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.6.1:*:*:*:*:*:*:*
webgroupmediacerberus_helpdesk2.7cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.7:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

70.5%

Related for NVD:CVE-2008-6440