Bug Report:4128:Anyone can see extension status

Discussion in '3CX Phone System - General' started by darrellchapman, Mar 5, 2008.

Thread Status:
Not open for further replies.
  1. darrellchapman

    Joined:
    Nov 26, 2007
    Messages:
    268
    Likes Received:
    0
    In my attempt to diagnose a problem that one of our users was having with their 3CX VoIP Client, I discovered that the voicemail pin setting is ignored by 3CX when connecting. As long as I enter a valid extension, I could make the VM pin whatever I want (and even leave blank). The 3CX VoIP Client will still log in to 3CX server and show the status of all extensions. Granted, I can't make any calls without the VM pin but I still feel that this is somewhat of a vulnerability.

    Personally, I don't think the 3CX server should provide any information to the VoIP Client unless a valid extension and VM pin is entered.

    Darrell Chapman
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. darrellchapman

    Joined:
    Nov 26, 2007
    Messages:
    268
    Likes Received:
    0
    Thanks Matt, I wasn't aware of that. 3CX is my first foray in to VoIP.

    Darrell Chapman
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Thread Status:
Not open for further replies.