Medium · 5.3 CVE-2024-24720 EUVD-2024-22119GHSA-8cpv-pp42-ppmr

An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a use…

Published Feb 27, 2024 · Updated May 30, 2025 · Assigned by mitre

Description

An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a user exists on a system.

Advisories 1

WID-SEC-2024-0484 innovaphone PBX: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 29, 2024

References

https://excellium-services.com/cert-xlm-advisory/CVE-2024-24720
https://wiki.innovaphone.com/index.php?title=Reference14r1:Release_Notes_Security#156999_-_App_Users:_Prevent_account_enumerate
https://cds.thalesgroup.com/en/tcs-cert/CVE-2024-24720