BroadWorks Call Detail Record Security Bypass Vulnerability
BID:44597
Info
BroadWorks Call Detail Record Security Bypass Vulnerability
| Bugtraq ID: | 44597 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 02 2010 12:00AM |
| Updated: | Nov 02 2010 12:00AM |
| Credit: | Nick Freeman |
| Vulnerable: |
BroadSoft Inc BroadWorks R16 |
| Not Vulnerable: | |
Discussion
BroadWorks Call Detail Record Security Bypass Vulnerability
BroadWorks is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and to obtain sensitive information. Successful exploits will enable the attacker to monitor the incoming and outgoing calls of users in other enterprise groups.
BroadWorks versions R16 and prior are vulnerable.
BroadWorks is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and to obtain sensitive information. Successful exploits will enable the attacker to monitor the incoming and outgoing calls of users in other enterprise groups.
BroadWorks versions R16 and prior are vulnerable.
Exploit / POC
BroadWorks Call Detail Record Security Bypass Vulnerability
Attackers can use readily available tools to exploit these issues.
The following exploit is available:
Attackers can use readily available tools to exploit these issues.
The following exploit is available:
Solution / Fix
BroadWorks Call Detail Record Security Bypass Vulnerability
Solution:
Reportedly, vendor updates are available. Please contact the vendor for more information.
Solution:
Reportedly, vendor updates are available. Please contact the vendor for more information.
References
BroadWorks Call Detail Record Security Bypass Vulnerability
References:
References:
- BroadWorks Arbitrary Call Detail Record Eavesdropping (Security-assessment.com)
- Vendor Homepage (BroadSoft Inc)