CVE-2011-3692

NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensitive information by reading this file and performing a base64 decoding step.

Score

CVSS 2.0 1.9 Low

Status

Modified - cve@mitre.org

Published

2011-09-27

Last modified

2024-09-16

Weaknesses

CWE-310

Affected products

• Enterprise Messenger Server (Netsaro)

References

• http://www.solutionary.com/index/SERT/Vuln-Disclosures/NetSaro-Enterprise-Messenger-Vulnerability.html