CVE-2014-2560

PhonerLite SIP Digest Leak (CVE-2014-2560) affects PhonerLite before version 2.15. The vulnerability is an information disclosure where the client reveals MD5-digest authenticated user credentials in a response to an invalid authentication challenge, exposed via spoofed SIP INVITE messages. This ...