CVE-2024-24720

Published: Feb 27, 2024

Modified: May 30, 2025

PUBLISHED

Description

An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a user exists on a system.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://excellium-services.com/cert-xlm-advisory/CVE-2024-24720

https://wiki.innovaphone.com/index.php?title=Reference14r1:Release_Notes_Security#156999_-_App_Users:_Prevent_account_enumerate

https://cds.thalesgroup.com/en/tcs-cert/CVE-2024-24720

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-24720

Description

Affected Products

References