CVE-2020-37104 | THREATINT

Description

ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database backup files by predicting backup filename patterns. Attackers can generate a list of 6-digit PIN combinations and fuzz the backup download URL to exfiltrate sensitive database information from the /database_backup/ directory.

PUBLISHED Reserved 2026-02-01 | Published 2026-02-11 | Updated 2026-02-12 | Assigner VulnCheck

HIGH: 8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Problem types

Insertion of Sensitive Information into Externally-Accessible File or Directory

Product status

4.0.1

affected

Credits

Fabien AUNAY finder

References

www.exploit-db.com/exploits/47900 (ExploitDB-47900) exploit

www.astppbilling.org/ (ASTPP Official Vendor Homepage) product

github.com/iNextrix/ASTPP (ASTPP GitHub Repository) product

www.vulncheck.com/...p-voip-billing-database-backup-download (VulnCheck Advisory: ASTPP 4.0.1 VoIP Billing - Database Backup Download) third-party-advisory

cve.org (CVE-2020-37104)

nvd.nist.gov (CVE-2020-37104)

Download JSON