Bug Report:4128:Anyone can see extension status

Status
Not open for further replies.

darrellchapman

Joined
Nov 26, 2007
Messages
268
Reaction score
0
In my attempt to diagnose a problem that one of our users was having with their 3CX VoIP Client, I discovered that the voicemail pin setting is ignored by 3CX when connecting. As long as I enter a valid extension, I could make the VM pin whatever I want (and even leave blank). The 3CX VoIP Client will still log in to 3CX server and show the status of all extensions. Granted, I can't make any calls without the VM pin but I still feel that this is somewhat of a vulnerability.

Personally, I don't think the 3CX server should provide any information to the VoIP Client unless a valid extension and VM pin is entered.

Darrell Chapman
 
Thanks Matt, I wasn't aware of that. 3CX is my first foray in to VoIP.

Darrell Chapman
 
Status
Not open for further replies.

Latest Posts

Forum statistics

Threads
111,894
Messages
589,601
Members
164,763
Latest member
Techmansam