Описание
Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 1:11.11.0~dfsg-2ubuntu1 |
| bionic | not-affected | 1:11.11.0~dfsg-2ubuntu1 |
| cosmic | not-affected | 1:11.11.0~dfsg-2ubuntu1 |
| devel | not-affected | 1:11.11.0~dfsg-2ubuntu1 |
| disco | not-affected | 1:11.11.0~dfsg-2ubuntu1 |
| esm-apps-legacy/xenial | not-affected | 1:11.11.0~dfsg-2ubuntu1 |
| esm-apps/bionic | not-affected | 1:11.11.0~dfsg-2ubuntu1 |
| esm-apps/xenial | not-affected | 1:11.11.0~dfsg-2ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| lucid | ignored | end of life |
Показывать по
EPSS
6.5 Medium
CVSS2
Связанные уязвимости
Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action.
Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Ce ...
Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action.
EPSS
6.5 Medium
CVSS2