CVE-2008-6440

Published: Mar 6, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the (1) /display and (2) /kb URIs.

Affected (14)

Products: Cerberus: Cerberus Helpdesk · Webgroupmedia: Cerberus Helpdesk

1 product

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Cerberus Cerberus Helpdesk	Version 2.5
Webgroupmedia Cerberus Helpdesk	Up to 3.3
Webgroupmedia Cerberus Helpdesk	Version 0.97.3
Webgroupmedia Cerberus Helpdesk	Version 2.0
Webgroupmedia Cerberus Helpdesk	Version 2.1
Webgroupmedia Cerberus Helpdesk	Version 2.2
Webgroupmedia Cerberus Helpdesk	Version 2.3
Webgroupmedia Cerberus Helpdesk	Version 2.4
Webgroupmedia Cerberus Helpdesk	Version 2.6.1
Webgroupmedia Cerberus Helpdesk	Version 2.649
Webgroupmedia Cerberus Helpdesk	Version 2.7.1 development_release
Webgroupmedia Cerberus Helpdesk	Version 2.7
Webgroupmedia Cerberus Helpdesk	Version 3.2.1
Webgroupmedia Cerberus Helpdesk	Version 3.2