Beveiligingsadvies

CVE-2022-42706

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-12-05 00:00:00

Laatst bijgewerkt 2025-04-24 14:23:59

Toegewezen door mitre

CVSS-score 4.9

Status PUBLISHED

Beschrijving

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.

← Alle CVE's bekijken Bekijk op cve.org ↗