CVE-2024-47071 - "FreePBX OSS Endpoint Manager File Access Authorization Bypass"

1 month ago 17
ARTICLE AD BOX
CVE ID : CVE-2024-47071
Published : Oct. 1, 2024, 4:15 p.m. | 24 minutes ago
Description : OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Read Entire Article