| Package | Affected versions | Patched versions |
|---|---|---|
| lispbx | = 2.0-4= 2.0-5 |
In Liberty lisPBX 2.0-4, configuration backup files can be retrieved remotely from /backup/lispbx-CONF-YYYY-MM-DD.tar or /backup/lispbx-CDR-YYYY-MM-DD.tar without authentication or authorization. These configuration files have all PBX information including extension numbers, contacts, and passwords.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free