CVE-2014-8418 in Asterisk
摘要 (英语)
The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8 before 1.8.28-cert8 and 11.6 before 11.6-cert8 allows remote authenticated users to gain privileges via a call from an external protocol, as demonstrated by the AMI protocol.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
预定
2014-10-22
披露
2014-11-24
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 68263 | Digium Asterisk DB Dialplan Function 权限提升 | 264 | 未经证实 | 官方修复 | CVE-2014-8418 |