-
Type:
Bug
-
Status: Closed
-
Priority:
Trivial
-
Resolution: Out of Date
-
Affects Version/s: 2.9
-
Fix Version/s: None
-
Component/s: Asterisk SIP Settings
-
ToDo:
As reported in this thread http://www.freepbx.org/forum/freepbx/general-help/security-enumerating-extensions using type=friend for extensions results in extension enumeration vulnerability. There is really no point in using type=friend for extensions. Extensions should use type=peer by default. The circumstances where type=friend would be needed are unclear, given the fact the extensions are supposed to register. More info in this post from 2005: http://www.voip-info.org/wiki/view/Asterisk+SIP+user+vs+peer
- relates to
-
FREEPBX-5306 In FreePBX Advanced Settings please allow selecting default extension type at creation
- Closed