CVE-2020-26150

Name of the Vulnerable Software and Affected Versions Logaritmo Aware CallManager 2012

Description The issue allows remote attackers to obtain sensitive information via a direct request to 'info.php', which calls the phpinfo function.

Recommendations For Logaritmo Aware CallManager 2012, consider restricting access to the 'info.php' file to prevent unauthorized disclosure of sensitive information. As a temporary workaround, remove or disable the phpinfo function call in 'info.php' until a more permanent solution is available.