CVE-2019-12147: Improper Neutralization of Argument Delimiters in a Command

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field. Upon successful exploitation, a remote unauthenticated user can create a local system user with sudo privileges, and use that user to login to th...

PT-2019-12659

Name of the Vulnerable Software and Affected Versions Sangoma Session Border Controller SBC version 2.3.23-119 GA Description The issue allows for Argument Injection via special characters in the username field, enabling a remote unauthenticated user to create a local system user with sudo...