CVE-2023-42717

A telephony service fails to properly check user permissions, allowing someone to access sensitive information remotely without needing special privileges.

Missing permission validation in a telephony service enables unauthenticated or low-privileged remote attackers to access restricted information disclosure. The vulnerability requires network access to the service but no privilege escalation; the absence of authorization checks allows information leakage.