CVE-2014-8413 in Digium Asterisk
요약 (영어)
The res_pjsip_acl module in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 does properly create and load ACLs defined in pjsip.conf at startup, which allows remote attackers to bypass intended PJSIP ACL rules.
예약하다
2014. 10. 22.
공개
2014. 11. 24.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 68258 | Digium Asterisk PJSIP ACL res_pjsip_acl 권한 상승 | 264 | 입증되지 않음 | 공식 수정 | CVE-2014-8413 |