CVE-2020-7351 in Trixbox Community Editionالمعلومات

الملخص

بحسب MITRE

An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user. Note that Trixbox Community Edition has been unsupported by the vendor since 2012. This issue affects: Fonality Trixbox Community Edition, versions 1.2.0 through 2.8.0.4. Versions 1.0 and 1.1 are unaffected.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

Rapid7, Inc.

حجز

21/01/2020

الاعتدال

تمت الموافقة

إدخال

VDB-154686

EPSS

0.65208

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you know our Splunk app?

Download it now for free!