First published: Mon Mar 28 2022(Updated: )
3CX System through 2022-03-17 stores cleartext passwords in a database.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
3CX 3CX | <=2022-03-17 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-45491 is a vulnerability that allows 3CX System through 2022-03-17 to store cleartext passwords in a database.
CVE-2021-45491 has a severity rating of 6.5 (Medium).
3CX System versions up to and including 2022-03-17 are affected by CVE-2021-45491.
To fix the CVE-2021-45491 vulnerability, update your 3CX System to a version that has the fix for this vulnerability.
You can find more information about CVE-2021-45491 at the following references: [PacketStormSecurity](http://packetstormsecurity.com/files/166386/3CX-Phone-System-Cleartext-Passwords.html) and [3CX Community Forums](https://www.3cx.com/community/forums/posts-articles-news/).