Bug Report:4128:Anyone can see extension status

Status
Not open for further replies.

darrellchapman

Joined
Nov 26, 2007
Messages
268
Reaction score
0
In my attempt to diagnose a problem that one of our users was having with their 3CX VoIP Client, I discovered that the voicemail pin setting is ignored by 3CX when connecting. As long as I enter a valid extension, I could make the VM pin whatever I want (and even leave blank). The 3CX VoIP Client will still log in to 3CX server and show the status of all extensions. Granted, I can't make any calls without the VM pin but I still feel that this is somewhat of a vulnerability.

Personally, I don't think the 3CX server should provide any information to the VoIP Client unless a valid extension and VM pin is entered.

Darrell Chapman
 
Thanks Matt, I wasn't aware of that. 3CX is my first foray in to VoIP.

Darrell Chapman
 
Status
Not open for further replies.

Forum statistics

Threads
112,305
Messages
591,792
Members
165,444
Latest member
Bluebox Global