critical9.1
CVE-2021-45490
The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 lack SSL certificate validation.
Impact
The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 lack SSL certificate validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 3cx | 3cx | through 18.0.4 through 18.0.11 through 2022-03-17 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/166376/3CX-Client-Missing-TLS-Validation.html
- https://www.3cx.com/community/forums/posts-articles-news/
- https://packetstormsecurity.com/files/166376/3CX-Client-Missing-TLS-Validation.html
- https://www.3cx.com/community/forums/posts-articles-news/