CVE-2014-8418 in Digium Asterisk
Résumé (Anglaise)
The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8 before 1.8.28-cert8 and 11.6 before 11.6-cert8 allows remote authenticated users to gain privileges via a call from an external protocol, as demonstrated by the AMI protocol.
Réserver
22/10/2014
Divulgation
24/11/2014
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 68263 | Digium Asterisk DB Dialplan Function élévation de privilèges | 264 | Non prouvée | Correctif officiel | CVE-2014-8418 |