Lucene search

K
osvGoogleOSV:CVE-2019-18610
HistoryNov 22, 2019 - 6:15 p.m.

CVE-2019-18610

2019-11-2218:15:11
Google
osv.dev
16

AI Score

7.1

Confidence

Low

EPSS

0.779

Percentile

98.3%

An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated Asterisk Manager Interface (AMI) user without system authorization could use a specially crafted Originate AMI request to execute arbitrary system commands.