Dismiss Notice
We would like to remind you that we’re updating our login process for all 3CX forums whereby you will be able to login with the same credentials you use for the Partner or Customer Portal. Click here to read more.

Bug Report:4128:Anyone can see extension status

Discussion in '3CX Phone System - General' started by darrellchapman, Mar 5, 2008.

Thread Status:
Not open for further replies.
  1. darrellchapman

    Joined:
    Nov 26, 2007
    Messages:
    268
    Likes Received:
    0
    In my attempt to diagnose a problem that one of our users was having with their 3CX VoIP Client, I discovered that the voicemail pin setting is ignored by 3CX when connecting. As long as I enter a valid extension, I could make the VM pin whatever I want (and even leave blank). The 3CX VoIP Client will still log in to 3CX server and show the status of all extensions. Granted, I can't make any calls without the VM pin but I still feel that this is somewhat of a vulnerability.

    Personally, I don't think the 3CX server should provide any information to the VoIP Client unless a valid extension and VM pin is entered.

    Darrell Chapman
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. darrellchapman

    Joined:
    Nov 26, 2007
    Messages:
    268
    Likes Received:
    0
    Thanks Matt, I wasn't aware of that. 3CX is my first foray in to VoIP.

    Darrell Chapman
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Thread Status:
Not open for further replies.