PT-2014-8509
CVE-2014-8413
·
تاريخ النشر
2014-11-24
·
تاريخ التحديث
2019-07-16
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Asterisk Open Source versions 12.x through 12.7.0
Asterisk Open Source versions 13.x through 13.0.0
Description
The issue concerns the res pjsip acl module, which fails to properly create and load ACLs defined in pjsip.conf at startup. This allows remote attackers to bypass intended PJSIP ACL rules.
Recommendations
For Asterisk Open Source versions 12.x through 12.7.0, update to version 12.7.1 or later.
For Asterisk Open Source versions 13.x through 13.0.0, update to version 13.0.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾