medium5.3
CVE-2024-24720
An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices.
Impact
An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a user exists on a system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Innovaphone | Innovaphone Pbx | before 14r1 Version 14r1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2024-24720
- https://excellium-services.com/cert-xlm-advisory/CVE-2024-24720
- https://wiki.innovaphone.com/index.php?title=Reference14r1:Release_Notes_Security#156999_-_App_Users:_Prevent_account_enumerate
- https://excellium-services.com/cert-xlm-advisory/CVE-2024-24720
- https://wiki.innovaphone.com/index.php?title=Reference14r1:Release_Notes_Security#156999_-_App_Users:_Prevent_account_enumerate