What’s Vulnerable › Vulnerabilities

CVE-2011-3692

• Severity: low (CVSS 1.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-09-27 · updated 2026-06-16
• Weakness: CWE-310

Description

NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensitive information by reading this file and performing a base64 decoding step.

Affected products

• Netsaro Enterprise Messenger Server: 2.0

References

• http://www.solutionary.com/index/SERT/Vuln-Disclosures/NetSaro-Enterprise-Messenger-Vulnerability.html
• http://www.solutionary.com/index/SERT/Vuln-Disclosures/NetSaro-Enterprise-Messenger-Vulnerability.html

Get alerted when CVE-2011-3692 or the next vulnerability affects your stack