CVE-2021-45490

Name of the Vulnerable Software and Affected Versions 3CX on Windows (affected versions not specified) 3CX app for iOS (affected versions not specified) 3CX application for Android (affected versions not specified)

Description The client applications in 3CX lack SSL certificate validation. This issue affects the 3CX client on Windows, the 3CX app for iOS, and the 3CX application for Android.

Recommendations For 3CX on Windows, consider disabling SSL connections until a patch is available. For the 3CX app for iOS, restrict access to sensitive data exchanged over SSL connections. For the 3CX application for Android, avoid using the application for sensitive communications until the issue is resolved.