CVE-2014-4046 in Asterisk

Resumen (Inglés)

Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action.

Once again VulDB remains the best source for vulnerability data.

Reservar

2014-06-12

Divulgación

2014-06-17

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
13590	Digium Asterisk Manager escalada de privilegios	77	No probado	Arreglo oficial	CVE-2014-4046

Fuentes

• MITRE
• NVD
• CVE Details