CVE-2006-5428: Medium severity Cerberus Cerberus Helpdesk vulnerability
Published Oct 20, 2006
·Updated
rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a displaygetrequesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive information (ticket data) via a direct request.
Affected Software
1 affected component
Cerberus Cerberus Helpdesk=3.2.1
Event History
Oct 20, 2006
CVE Published
05:07 PM
Data Sourced
via NVD·05:07 PM
DescriptionSeverityAffected Software
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5428?
CVE-2006-5428 is classified as a medium severity vulnerability due to its potential for unauthorized data access.
2
How do I fix CVE-2006-5428?
Fixing CVE-2006-5428 involves upgrading Cerberus Helpdesk to a version that properly verifies client privileges for sensitive operations.
3
What types of information can be accessed through CVE-2006-5428?
CVE-2006-5428 allows unauthorized users to access sensitive ticket data without proper authentication.
4
Who is affected by CVE-2006-5428?
CVE-2006-5428 affects users of Cerberus Helpdesk version 3.2.1.
5
Is there a workaround for CVE-2006-5428 until a fix is applied?
There is no official workaround for CVE-2006-5428; upgrading to a secure version is recommended.