Vulnerability in Netsaro Enterprise Messenger Server

CVE-2011-3692

NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensitive information by reading this file and performing a base64 decoding step.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.003 (19.7th percentile) — read the EPSS interpretation.

Affected products

Netsaro Enterprise_messenger_server — versions 2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

cve@mitre.org (x_refsource_MISC)