DEBIAN-CVE-2024-57520

Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the actioncreateconfig function. NOTE: this is disputed by the Supplier because the impact is limited to creating empty files outside of the Asterisk product directory aka directory traversal...

CVE-2024-57520

Asterisk version 22 is impacted by an Insecure Permissions vulnerability in the action_createconfig function. This flaw could allow a remote attacker to execute arbitrary code. However, the supplier disputes this, stating the impact is limited to directory traversal (creating empty files outside ...

PT-2025-5774

Name of the Vulnerable Software and Affected Versions: Asterisk version 22 Description: The issue allows a remote attacker to execute arbitrary code via the action createconfig function. This is due to an insecure permissions vulnerability. Recommendations: For Asterisk version 22, as a temporary...