Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in innovaphone PBX ausnutzen, um Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.
Product
innovaphone PBX ist eine Telefonanlage mit Unified Communications-Funktionen
Vulnerabilities 2
-
Medium 6.5
An issue was discovered on Innovaphone PBX before 14r1 devices. The password form, used to authenticate, allows a Brute…
-
Medium 5.3
An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information…
Revision history
-
#2
Update-Links von Innovaphone aufgenommen
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2024-02-26
https://github.com/advisories/GHSA-f78h-hr6r-68jw
-
GitHub Advisory Database vom 2024-02-26
https://github.com/advisories/GHSA-8cpv-pp42-ppmr
-
Excellium Security Advisory vom 2024-02-26
https://excellium-services.com/cert-xlm-advisory/cve-2024-24720/
-
Excellium Security Advisory vom 2024-02-26
https://excellium-services.com/cert-xlm-advisory/cve-2024-24721/
-
Innovaphone Release Notes vom 2024-02-29
https://wiki.innovaphone.com/index.php?title=Reference14r1:Release_Notes_Security
-
Innovaphone Release Notes vom 2024-02-29
https://wiki.innovaphone.com/index.php?title=Reference13r3:Release_Notes_Security