| Package | Affected versions | Patched versions |
|---|---|---|
| vicidial | = 2.7≤ 2.8 |
VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) VDCL users, which makes it easier for remote attackers to obtain access.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free