CVE-2024-24720

An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a user exists on a system...

CVE-2024-24720

An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a user exists on a system...

CVE-2024-24720

An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a user exists on a system...

CVE-2024-24720

Affected software: Innovaphone PBX prior to version 14r1. Vulnerability: The Forgot password function leaks user existence information and provides divergent responses to requests, enabling information disclosure. Root cause (as described): Response behavior differences reveal whether a user exis...