PT-2014-5694
CVE-2014-4046
·
تاريخ النشر
2014-06-17
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Asterisk Open Source versions 11.x through 11.10.0
Asterisk Open Source versions 12.x through 12.3.0
Certified Asterisk versions 11.6 through 11.6-cert2
Description
The issue allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action.
Recommendations
For Asterisk Open Source versions 11.x through 11.10.0, update to version 11.10.1 or later.
For Asterisk Open Source versions 12.x through 12.3.0, update to version 12.3.1 or later.
For Certified Asterisk versions 11.6 through 11.6-cert2, update to version 11.6-cert3 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾