漏洞概述 漏洞名称: VULN-2 PoC 漏洞描述: 以低权限用户登录,该用户没有“Users and Roles”权限。 影响范围 受影响功能: - Call Detention - Display Incoming Calls - Display Calls with Screen Recording - Changing segment protection - Edit Notes - Other Settings - Recorded Calls - Create Nonrecorded Calls - Users and Roles(被红色框标出) - Audit - Export - Send Calls by Email - Recording Rules - Call List - Pause and Resume Calls 修复方案 步骤1: 以低权限用户登录,该用户没有“Users and Roles”权限。 步骤2: 提取 , , 和 。 POC代码