🎯 New Report #3837634: JaaS: Unauthenticated, cross-tenant outbound SIP calling via JaaS SIP gateway (toll fraud caller-ID spoofing)
🔺Severity: Medium
👽 Reporter: offseq
⭐️ Reputation: 186
🛠 State: resolved
💼 Team: 8x8
💵 Bounty: 500
🕐 Submitted: 2026-07-02
⏰ Disclosed: 2026-08-12 16:07:38
📝 Summary: A vulnerability was discovered in the JaaS SIP gateway that allowed unauthenticated, cross-tenant outbound SIP calling. This could have facilitated toll fraud and caller-ID spoofing.
📂 Report JSON File: 3837634
@hackeronereports