Описание
Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.
EPSS
Процентиль: 13%
0.00043
Низкий
5 Medium
CVSS3
Дефекты
CWE-863
Связанные уязвимости
CVSS3: 5
github
8 месяцев назад
Yealink YMCS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.
EPSS
Процентиль: 13%
0.00043
Низкий
5 Medium
CVSS3
Дефекты
CWE-863