CVE-2025-66039

CRITICAL

9.8

Description

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie12/9/2025

Derniere modification2/2/2026

Sourcenvd

Observations honeypot0

Produits affectes

sangoma:freepbx

Faiblesses (CWE)

CWE-287

References

https://github.com/FreePBX/framework/commit/04224253156543cd9932b90458660b2f19fc0e35#diff-72f14a52840a61504a8e03cd195035b44e488aecd634b001bc6412a04bdc940bR20-R50(security-advisories@github.com)

https://github.com/FreePBX/security-reporting/security/advisories/GHSA-9jvh-mv6x-w698(security-advisories@github.com)

https://www.freepbx.org/watch-what-we-do-with-security-fixes-%f0%9f%91%80(security-advisories@github.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.