CVE-2006-5428: Cerberus Helpdesk

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive information (ticket data) via a direct request.

Affected products

• Cerberus Cerberus Helpdesk: version 3.2.1 only

Published 2006-10-20. Last modified 2026-06-16.