Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorised users to bypass password authentication and access services provided by the FreePBX admin.
Loading feed…
Loading feed…
Updated
Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorised users to bypass password authentication and access services provided by the FreePBX admin.
A vulnerability in Sangoma Switchvox has a 19% estimated chance of exploitation in the next 30 days, according to a probability signal from FIRST. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether Sangoma Switchvox is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known user via the testconnection ->…
End of feed