CyberRota Analysis
AI-GeneratedThe FreePBX Framework module prior to versions 16.0.47 and 17.0.30 is vulnerable to an authentication bypass due to a flaw in the backup restoration process, allowing an authenticated user with the appropriate access to disable authentication by restoring a crafted backup. This could lead to unauthorized access to the system, compromising sensitive communications and configurations. Organizations using affected versions should prioritize upgrading to the patched versions to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to restore the hidden AUTHTYPE setting with the value none through runRestore() in amp_conf/htdocs/admin/libraries/Builtin/Restore.php. An authenticated user with sufficient backup-restore access or write access to backup files can thereby disable FreePBX authentication during restoration, bypassing the user-interface removal of AUTHTYPE=none. This issue is fixed in versions 16.0.47 and 17.0.30.