CVE Catalog
CVE-2023-33887
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.09%
1th percentile - higher than 1% of all known CVEs
Summary
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive information, potentially leading to privacy breaches and data security issues.
Recommendation
It is recommended to implement appropriate permission checks in the telephony service to prevent unauthorized access to information.
Original NVD description (English source)
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.