{"id":"CVE-2026-63315","revision":"f2b09ba8468c44c5bef7aee3094df6ae","records":[{"revision":"f2b09ba8468c44c5bef7aee3094df6ae","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-63315","aliases":[],"title":"Plaintext storage of a password in WebCTI","description":"WebCTI service for Slican IPx telephone exchanges\u00A0stores\u00A0temporary subscriber password in plaintext. An attacker with\u00A0access to the database can obtain the user's password and log in to the subscriber's account.\n\n\n\nThis issue was fixed in IPx series version 6.62.0100.","state":0,"publishedAt":"2026-10-15T09:00:45.702+00:00","modifiedAt":"2026-10-15T13:47:26.22+00:00","affected":[{"ecosystem":"Vendor product","name":"IPx","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Slican\",\n                    \"product\": \"IPx\",\n                    \"modules\": [\n                        \"WebCTI\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.62.0100\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","score":8.2,"severity":"HIGH"}],"references":["https://cert.pl/posts/2026/08/CVE-2026-63314","https://www.slican.pl/oferta/oprogramowanie/aplikacje-cti/webcti-dla-abonenta/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-63315","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-63315","identifiers":["CVE-2026-63315"]},"retained":false,"historicalAffected":[]}],"coverage":[]}