CVE-2011-3692: Netsaro Enterprise Messenger Server

Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days.

NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensitive information by reading this file and performing a base64 decoding step.

Affected products

• Netsaro Enterprise Messenger Server: version 2.0 only

Published 2011-09-27. Last modified 2026-06-16.