CVE-2019-15059

7.5 highEPSS 1.0%

High (7.5) in lispbx project lispbx. EPSS 1.0% chance of exploitation in the next 30 days.

In Liberty lisPBX 2.0-4, configuration backup files can be retrieved remotely from /backup/lispbx-CONF-YYYY-MM-DD.tar or /backup/lispbx-CDR-YYYY-MM-DD.tar without authentication or authorization. These configuration files have all PBX information including extension numbers, contacts, and passwords.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2021-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lispbx_project:lispbx

References

https://gist.github.com/famatte69/52e6ad03d0f23428b92bd029c856112c
https://gist.github.com/famatte69/52e6ad03d0f23428b92bd029c856112c

Check your stack JSON