Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-phq9-6f4r-97wc

Опубликовано: 05 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.

EPSS

Процентиль: 60%
0.00403
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 4.9
ubuntu
около 3 лет назад

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.

CVSS3: 4.9
nvd
около 3 лет назад

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.

CVSS3: 4.9
debian
около 3 лет назад

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 t ...

EPSS

Процентиль: 60%
0.00403
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-22