CVE-2006-2020

Affected product: Asterisk Recording Interface (ARI) in Asterisk@Home before 2.8. Component/issue: Recordings/includes/main.conf stored under the web document root with insufficient access control. Impact (as stated): Remote attackers can obtain password information from the configuration file, v...