Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-12148
HistoryOct 22, 2019 - 4:15 p.m.

Authentication flaw

2019-10-2216:15:00
PRIOn knowledge base
www.prio-n.com
3

9.6 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.5%

The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device’s admin web portal without providing any credentials. This affects /var/webconfig/gui/Webconfig.inc.php.

9.6 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.5%

Related for PRION:CVE-2019-12148