CVE Catalog

CVE-2023-33889

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.09%

1th percentile - higher than 1% of all known CVEs

Summary

In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

Risk Assessment

The lack of proper permission checks may allow unauthorized access to sensitive data, posing a threat to the confidentiality of information within the organization.

Recommendation

It is recommended to implement appropriate permission checks in the telephony service to prevent unauthorized access to information.

Original NVD description (English source)

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS