PT-2019-13761

Name of the Vulnerable Software and Affected Versions Yealink phones versions prior to 2019-08-04 Description The issue concerns improper checking of user roles in POST requests. This allows the default User account, which has a password of user, to make admin requests via HTTP. Recommendations F...