PT-2020-7625
CVE-2014-2560
·
تاريخ النشر
2020-02-12
·
تاريخ التحديث
2020-02-14
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
PhonerLite versions prior to 2.15
Description
The issue allows remote attackers to obtain access via a brute-force attack due to the provision of hashed credentials in response to an invalid authentication challenge, related to a "SIP Digest Leak" issue.
Recommendations
For versions prior to 2.15, update to version 2.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the SIP authentication mechanism to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾