CVE-2022-29330 Information

Description

Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials cryptographic keys and voicemails files via unspecified vectors.

Reference

https://www.arsouyes.org/blog/2022/2022-06-30-VitalPBX-0day http://vitalpbx.com