Vulnerability Description
In the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is prone to a directory traversal attack: "/api/RecordingList/DownloadRecord?file=" and "/api/SupportInfo?file=" are the vulnerable parameters. An attacker must be authenticated to exploit this issue to access sensitive information to aid in subsequent attacks.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| 3Cx | 3Cx | 15.5.3554.1 |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2017/Oct/37Mailing ListThird Party Advisory
- https://www.exploit-db.com/exploits/42991/Third Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2017/Oct/37Mailing ListThird Party Advisory
- https://www.exploit-db.com/exploits/42991/Third Party AdvisoryVDB Entry
FAQ
What is CVE-2017-15359?
CVE-2017-15359 is a vulnerability with a CVSS score of 6.5 (MEDIUM). In the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is prone to a directory traversal attack: "/api/RecordingList/DownloadRecord?file=" and "/api/SupportInfo...
How severe is CVE-2017-15359?
CVE-2017-15359 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-15359?
Check the references section above for vendor advisories and patch information. Affected products include: 3Cx 3Cx.