Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/12/17 12:55 a.m.1 views

CVE-2025-67722

FreePBX is an open-source web-based graphical user interface GUI that manages Asterisk. Prior to versions 16.0.45 and 17.0.24 of the FreePBX framework, an authenticated local privilege escalation exists in the deprecated FreePBX startup script amportal. In the deprecated amportal utility, the...

8.4CVSS6.8AI score0.00012EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/16 12:14 a.m.1 views

EUVD-2025-203482

FreePBX is an open-source web-based graphical user interface GUI that manages Asterisk. Prior to versions 16.0.45 and 17.0.24 of the FreePBX framework, an authenticated local privilege escalation exists in the deprecated FreePBX startup script amportal. In the deprecated amportal utility, the...

8.4CVSS6.3AI score0.00012EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/16 12:14 a.m.2 views

CVE-2025-67722 Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation

FreePBX is an open-source web-based graphical user interface GUI that manages Asterisk. Prior to versions 16.0.45 and 17.0.24 of the FreePBX framework, an authenticated local privilege escalation exists in the deprecated FreePBX startup script amportal. In the deprecated amportal utility, the...

8.4CVSS6.5AI score0.00012EPSS
Exploits0References2
CVE
CVE
added 2025/12/16 12:14 a.m.10 views

CVE-2025-67722

FreePBX prior to 16.0.45 and 17.0.24 contains an authenticated local privilege escalation in the deprecated amportal startup script. The amportal lookup for the freepbx_engine file scans /etc/asterisk/ directories that are typically writable by the asterisk user/group, enabling a member of the as...

8.4CVSS6.5AI score0.00012EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.2 views

PT-2025-51351

Name of the Vulnerable Software and Affected Versions FreePBX versions prior to 16.0.45 FreePBX versions prior to 17.0.24 Description FreePBX is a web-based graphical user interface for managing Asterisk. A local privilege escalation exists in the deprecated FreePBX startup script amportal in...

8.4CVSS6.7AI score0.00012EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2022-42706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk...

4.9CVSS5.9AI score0.0081EPSS
Exploits0References2
Rows per page
Query Builder