| Package | Affected versions | Patched versions |
|---|---|---|
| asterisk | = 20.0.0≥ 16.0.0, < 16.29.1≥ 17.0.0, < 18.15.1≥ 19.0.0, < 19.7.1 | 16.29.118.15.119.7.1 |
| certified asterisk | = 18.9< 18.9 | 18.9 |
An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free