Total vulnerabilities in the database
An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.
| Software | From | Fixed in |
|---|---|---|
| sangoma / asterisk | 19.0.0 | 19.7.1 |
| sangoma / certified_asterisk | 18.9-cert1 | 18.9-cert1.x |
| sangoma / asterisk | 17.0.0 | 18.15.1 |
| sangoma / asterisk | 16.0.0 | 16.29.1 |
| sangoma / certified_asterisk | - | 18.9 |
| sangoma / asterisk | 20.0.0 | 20.0.0.x |