Lucene search
Veracode Vulnerability DatabaseVERACODE:34971HistoryApr 05, 2022 - 9:52 a.m.
Access Restriction Bypass
2022-04-0509:52:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.779 High
EPSS
Percentile
98.3%
asterisk:stretch is vulnerable to Access Restriction Bypass. An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated Asterisk Manager Interface (AMI) user without system authorization could use a specially crafted Originate AMI request to execute arbitrary system commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| asterisk:stretch | eq | 1:13.14.1~dfsg-2+deb9u4 | |
| asterisk:stretch | eq | 1:13.14.1~dfsg-2+deb9u4 |
Related
osv
osv
CVE-2019-18610
2019-11-22 18:15:11
asterisk - security update
2019-11-30 00:00:00
asterisk - security update
2022-04-03 00:00:00
cve
cve
CVE-2019-18610
2019-11-22 18:15:11
ubuntucve
ubuntucve
CVE-2019-18610
2019-11-22 00:00:00
symantec
symantec
nessus
nessus
FreeBSD : asterisk -- AMI user could execute system commands (49b61ab6-0d04-11ea-87ca-001999f8d30b)
2019-11-25 00:00:00
Debian DLA-2969-1 : asterisk - LTS security update
2022-04-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Sangoma Asterisk Command Injection (CVE-2019-18610)
2020-04-16 00:00:00
prion
prion
Design/Logic Flaw
2019-11-22 18:15:00
freebsd
freebsd
asterisk -- AMI user could execute system commands
2019-10-10 00:00:00
nvd
nvd
CVE-2019-18610
2019-11-22 18:15:11
debiancve
debiancve
CVE-2019-18610
2019-11-22 18:15:11
cvelist
cvelist
CVE-2019-18610
2019-11-22 17:31:16
alpinelinux
alpinelinux
CVE-2019-18610
2019-11-22 18:15:11
openvas
openvas
Asterisk Multiple Vulnerabilities (AST-2019-006, AST-2019-007)
2019-11-22 00:00:00
Debian: Security Advisory (DLA-2017-1)
2019-12-01 00:00:00
Debian: Security Advisory (DLA-2969-1)
2022-04-04 00:00:00
debian
debian
[SECURITY] [DLA 2017-1] asterisk security update
2019-11-30 20:56:56
[SECURITY] [DLA 2969-1] asterisk security update
2022-04-03 05:56:53