| Package | Affected versions | Patched versions |
|---|---|---|
| cerberus helpdesk | = 3.2.1 |
rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive information (ticket data) via a direct request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free