CVE-2011-3692

LowCVSS 1.9/10Last modified Jun 16, 2026

Description

NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensitive information by reading this file and performing a base64 decoding step.

Metrics

CVSS 2.0 1.9/10AV:L/AC:M/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-310

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2011
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-36931.9NetSaro Enterprise Messenger Server 2.0 allows local users to discover cleartext server credentials by reading the NetSaro.fdb file.CVE-2011-36945.0The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read application source code by appeCVE-2011-36955.0111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installaCVE-2011-36965.060cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installationCVE-2011-36975.0Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation paCVE-2011-36985.0AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatCVE-2011-36995.0John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveaCVE-2011-37005.0Advanced Electron Forum (AEF) 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveaCVE-2011-37015.0AlegroCart 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installationCVE-2011-37025.0Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatiCVE-2011-37035.0AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path CVE-2011-37045.0appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa
CVE-2011-3692: Low severity, CVSS 1.9 | Vulnix