Sangoma SBC 2.3.23-119-GA Authentication Bypass

Posted on 19 October 2019

A remotely exploitable vulnerability exists in the 2.3.23-119-GA version of Sangoma SBC that would allow an unauthenticated user to bypass authentication and login as a non-existent user but with complete access to the dashboard including additional privileged user creation capabilities.