CVE-2006-5428

rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the…

published October 20, 2006

CVSS
—
EPSS
3%
Percentile
86.4
In the wild
Unconfirmed
What it is

rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive information (ticket data) via a direct request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02800 · 86.4th percentile
Published
2006-10-20T17:00Z
EPSS history
Timeline
  • 20 OCT 17:00Z
    rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the…
    cvelistv5