| Название | Eleveo Call Recording 9.7.0 Broken Access Control |
|---|
| Описание | Multiple Broken Access Control vulnerabilities in Eleveo Call Recording 9.7.0 allow low-privileged authenticated users to bypass administrator-defined access filters and retrieve restricted call details via /callrec/composeEmailAction.do and /callrec/sendEmailAction.do endpoints. Although administrators can configure filters to limit which call recordings a user can access, the backend does not properly enforce these restrictions when processing email send requests. By manipulating these endpoints, a user can retrieve information about recordings that should be inaccessible according to the applied filters. The functionality also allows the user to send the recording details and associated audio attachments to arbitrary email addresses.
Impact
- Exposure of restricted call recordings, allowing users to bypass administrator-defined filters and access call details that should be unavailable to them.
- Unauthorized distribution of call recordings, including audio attachments, by sending the retrieved data to arbitrary email recipients.
PoC
Comprehensive reproduction steps, including supporting screenshots, are available via the shared private link. Public disclosure will occur on GitHub after the responsible disclosure period of approximately 90 days has elapsed.
Note
Contact with the vendor was initiated on March 10, and no response has been received as of the submission date. The provided PoC is accessible via a restricted link and is intended solely for review purposes by anyone possessing the link. I plan to reserve a CVE early, with public disclosure scheduled after 90 days from the initial contact date, at which point the advisory will be published on my GitHub repository. The information shared here is provided exclusively to the VulnDB team to ensure awareness and understanding of the vulnerability details. |
|---|
| Источник | ⚠️ https://drive.google.com/file/d/1Cyt_9wlVx8n_9Hu6Ygo4Goy2aBCUgNs0/view?usp=sharing |
|---|
| Пользователь | omarelshopky (UID 85487) |
|---|
| Представление | 05.04.2026 22:08 (3 месяцы назад) |
|---|
| Модерация | 11.07.2026 11:33 (3 months later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 377777 [Eleveo Call Recording Software 9.7.0 composeEmailAction.do эскалация привилегий] |
|---|
| Баллы | 20 |
|---|