Lucene search
+L

5 matches found

NVD
NVD
•added 2024/10/01 4:15 p.m.•26 views

CVE-2024-47071

OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4...

6.8CVSS0.00509EPSS
SaveExploits0References2
OSV
OSV
•added 2024/10/01 3:40 p.m.•14 views

CVE-2024-47071 OSS Endpoint Manager allows unauthorized access to read system files

OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4...

6.8CVSS6.6AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2024/10/01 3:40 p.m.•32 views

CVE-2024-47071 OSS Endpoint Manager allows unauthorized access to read system files

OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4...

6.8CVSS0.00509EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/01 3:40 p.m.•16 views

CVE-2024-47071 OSS Endpoint Manager allows unauthorized access to read system files

OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4...

6.8CVSS6.4AI score0.00509EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/01 12:00 a.m.•0 views

CVE-2024-47071: Improper Limitation of a Pathname to a Restricted Directory

OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4...

6.8CVSS5.9AI score0.00509EPSS
SaveExploits0References1
Rows per page
Query Builder