Medium severity5.3NVD Advisory· Published Feb 27, 2024· Updated Jun 17, 2026
CVE-2024-24720
CVE-2024-24720
Description
An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a user exists on a system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Innovaphone/PBXdescription
cpe:2.3:a:innovaphone:innovaphone_pbx:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:innovaphone:innovaphone_pbx:*:*:*:*:*:*:*:*range: <14r1
- cpe:2.3:a:innovaphone:innovaphone_pbx:14r1:*:*:*:*:*:*:*
- (no CPE)range: <14r1
Patches
Vulnerability mechanics
References
3- cds.thalesgroup.com/en/tcs-cert/CVE-2024-24720nvdThird Party Advisory
- excellium-services.com/cert-xlm-advisory/CVE-2024-24720nvdNot Applicable
- wiki.innovaphone.com/index.phpnvdRelease Notes
News mentions
0No linked articles in our index yet.