CVE-2023-42716

A telephony service fails to properly check user permissions, allowing someone to access sensitive information remotely without needing special privileges. This means unauthorized users could read data they shouldn't have access to.

Missing permission validation in a telephony service enables unauthenticated or low-privileged remote attackers to access confidential information through direct service interaction. The vulnerability stems from inadequate access control checks on sensitive operations, resulting in information disclosure without privilege escalation requirements.