The Alcatel CTI Solution is completely broken by design and performs authentication validation client-side.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/94067/n.runs-SA-2010.001.txt
Source: https://packetstormsecurity.com/files/94067/Alcatel-CTI-Solution-Client-Side-Authentication.html