Bug Report:4128:Anyone can see extension status

Status
Not open for further replies.

darrellchapman

Joined
Nov 26, 2007
Messages
268
Reaction score
0
In my attempt to diagnose a problem that one of our users was having with their 3CX VoIP Client, I discovered that the voicemail pin setting is ignored by 3CX when connecting. As long as I enter a valid extension, I could make the VM pin whatever I want (and even leave blank). The 3CX VoIP Client will still log in to 3CX server and show the status of all extensions. Granted, I can't make any calls without the VM pin but I still feel that this is somewhat of a vulnerability.

Personally, I don't think the 3CX server should provide any information to the VoIP Client unless a valid extension and VM pin is entered.

Darrell Chapman
 
Thanks Matt, I wasn't aware of that. 3CX is my first foray in to VoIP.

Darrell Chapman
 
Status
Not open for further replies.