CVE-2008-6440: Cerberus Helpdesk

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the (1) /display and (2) /kb URIs.

Affected products

• Cerberus Cerberus Helpdesk: version 2.5 only
• Webgroupmedia Cerberus Helpdesk: up to and including 3.3; version 0.97.3 only; version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; …

Published 2009-03-06. Last modified 2026-06-16.