• V20: 3CX Re-engineered. Get V20 for increased security, better call management, a new admin console and Windows softphone. Learn More.

Bug Report:4128:Anyone can see extension status

Status
Not open for further replies.

darrellchapman

Joined
Nov 26, 2007
Messages
268
Reaction score
0
In my attempt to diagnose a problem that one of our users was having with their 3CX VoIP Client, I discovered that the voicemail pin setting is ignored by 3CX when connecting. As long as I enter a valid extension, I could make the VM pin whatever I want (and even leave blank). The 3CX VoIP Client will still log in to 3CX server and show the status of all extensions. Granted, I can't make any calls without the VM pin but I still feel that this is somewhat of a vulnerability.

Personally, I don't think the 3CX server should provide any information to the VoIP Client unless a valid extension and VM pin is entered.

Darrell Chapman
 
Thanks Matt, I wasn't aware of that. 3CX is my first foray in to VoIP.

Darrell Chapman
 
Status
Not open for further replies.

Getting Started - Admin

Latest Posts

Forum statistics

Threads
141,621
Messages
748,857
Members
144,734
Latest member
AmirLD
Get 3CX - Absolutely Free!

Link up your team and customers Phone System Live Chat Video Conferencing

Hosted or Self-managed. Up to 10 users free forever. No credit card. Try risk free.

3CX
A 3CX Account with that email already exists. You will be redirected to the Customer Portal to sign in or reset your password if you've forgotten it.