CVE-2021-45310

Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to an improper access restriction

published February 14, 2022

CVSS
—
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to an improper access restriction. Users information such as first name, last name, acount id, server uuid, email address, profile image, number, timestamps, etc can be extracted by sending an unauthenticated HTTP GET request to the https://Switchvox-IP/main?cmd=invalid_browser.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00898 · 59.2th percentile
Published
2022-02-14T20:15Z
EPSS history
Timeline
  • 14 FEB 20:15Z
    Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to an improper access restriction
    cvelistv5