CVE-2008-6440: Medium severity Webgroupmedia Cerberus Helpdesk vulnerability
Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the (1) /display and (2) /kb URIs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6440?
CVE-2008-6440 is rated as a medium severity vulnerability due to the potential for unauthorized information disclosure.
How do I fix CVE-2008-6440?
To fix CVE-2008-6440, upgrade to Cerberus Helpdesk version 4.0 (Build 600) or later.
What types of information can be obtained through CVE-2008-6440?
CVE-2008-6440 allows remote attackers to access sensitive information via direct requests to certain non-standard helpdesk pages.
Which versions of Cerberus Helpdesk are affected by CVE-2008-6440?
CVE-2008-6440 affects multiple versions of Cerberus Helpdesk, including versions prior to 4.0 (Build 600).
Is there a workaround for CVE-2008-6440?
There are no documented workarounds for CVE-2008-6440; upgrading to a fixed version is recommended.