Lucene search
PRIOn knowledge basePRION:CVE-2023-49294HistoryDec 14, 2023 - 8:15 p.m.
Information disclosure
2023-12-1420:15:00
PRIOn knowledge base
www.prio-n.com
6
asterisk
information disclosure
arbitrary files
Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the live_dangerously is not enabled. This allows arbitrary files to be read. Asterisk versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, contain a fix for this issue.
Related
ubuntucve
ubuntucve
CVE-2023-49294
2023-12-14 00:00:00
zdt
zdt
alpinelinux
alpinelinux
CVE-2023-49294
2023-12-14 20:15:52
nvd
nvd
CVE-2023-49294
2023-12-14 20:15:52
packetstorm
packetstorm
Asterisk AMI 18.20.0 File Content / Path Disclosure
2024-03-28 00:00:00
osv
osv
CVE-2023-49294
2023-12-14 20:15:52
asterisk - security update
2024-01-04 00:00:00
asterisk - security update
2023-12-28 00:00:00
cvelist
cvelist
CVE-2023-49294 Asterisk Path Traversal vulnerability
2023-12-14 19:40:46
veracode
veracode
Directory Traversal
2023-12-25 14:03:05
cve
cve
CVE-2023-49294
2023-12-14 20:15:52
debiancve
debiancve
CVE-2023-49294
2023-12-14 20:15:52
exploitdb
exploitdb
Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)
2024-03-28 00:00:00
openvas
openvas
Asterisk Multiple Vulnerabilities (Dec 2023)
2023-12-15 00:00:00
Debian: Security Advisory (DSA-5596-1)
2024-01-12 00:00:00
Debian: Security Advisory (DLA-3696-1)
2024-01-12 00:00:00
debian
debian
[SECURITY] [DSA 5596-1] asterisk security update
2024-01-04 21:39:15
[SECURITY] [DLA 3696-1] asterisk security update
2023-12-28 23:01:50