Information disclosure in Netsaro Enterprise Messenger Server

CVE-2011-3694

The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read application source code by appending a %00 character to a URL.

Vulnerability class: Information Disclosure

EPSS: 0.011 (61.6th percentile) — read the EPSS interpretation.

Affected products

Netsaro Enterprise_messenger_server — versions 2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_MISC)