Cerberus Helpdesk rpc.php Information Disclosure
Medium Nessus Network Monitor Plugin ID 3797
SynopsisThe remote web server contains a PHP script that is affected by an information disclosure issue.
DescriptionThe remote host is running Cerberus Helpdesk, a web-based helpdesk suite written in PHP. The installed version of Cerberus Helpdesk on the remote host allows an unauthenticated attacker to retrieve information about ticket requesters through the 'rpc.php' script.
SolutionUpgrade or patch according to vendor recommendations.