FreePBX 13.x < 13.0.197.14 / 14.x < 14.0.13.12 / 15.x < 15.0.16.27 Remote Admin Authentication Bypass

The version of FreePBX installed on the remote host is 13.x prior to 13.0.197.14, 14.x prior to 14.0.13.12, or 15.x prior to 15.0.16.27. It is, therefore, affected by an authentication bypass vulnerability: - Sangoma FreePBX has incorrect access control that allows unauthenticated remote attacker...

CVE-2019-19006

creationtimestamp| type| source ---|---|--- 2020-11-05 14:02:14+00:00| exploited| https://t.me/truesecator/1118 2020-11-05 16:55:13+00:00| seen| MISP/9fbd6001-b34c-4886-8240-d3e93a433faf 2020-11-05 19:44:39+00:00| seen| MISP/77f74cbc-dd0e-4c6e-a9c4-f15e1a87c0f9 2020-11-05 19:44:39+00:00| seen|...

Premium-Rate Phone Fraudsters Hack VoIP Servers of 1200 Companies

Cybersecurity researchers today took the wraps off an on-going cyber fraud operation led by hackers in Gaza, West Bank, and Egypt to compromise VoIP servers of more than 1,200 organizations across 60 countries over the past 12 months. According to findings published by Check Point Research, the...

Premium-Rate Phone Fraudsters Hack VoIP Servers of 1200 Companies

Cybersecurity researchers today took the wraps off an on-going cyber fraud operation led by hackers in Gaza, West Bank, and Egypt to compromise VoIP servers of more than 1,200 organizations across 60 countries over the past 12 months. According to findings published by Check Point Research, the...

VulnCheck KEV: CVE-2019-19006

Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services provided by the FreePBX admin...

CVE-2019-19006

Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control...

CVE-2019-19006

Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control...

CVE-2019-19006

CVE-2019-19006 affects Sangoma FreePBX; multiple releases are vulnerable due to incorrect access control. Affected versions: FreePBX 13.x prior to 13.0.197.14, 14.x prior to 14.0.13.12, and 15.x prior to 15.0.16.27. The vulnerability enables remote authentication bypass on the admin interface (re...