Lucene search

Veracode Vulnerability DatabaseVERACODE:32827

HistoryNov 05, 2021 - 10:27 a.m.

Privilege Escalation

2021-11-0510:27:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

freeswitch is vulnerable to privilege escalation. The vulnerability exists due to SIP requests of the type SUBSCRIBE are not authenticated by default.

CPENameOperatorVersion
freeswitch:edgeeq1.10.6-r0
freeswitch:edgeeq1.10.5-r2
freeswitch:edgeeq1.10.3-r0
freeswitch:edgeeq1.10.6-r2
freeswitch:edgeeq1.10.2-r0
freeswitch:edgeeq1.8.7-r1
freeswitch:edgeeq1.10.6-r1
freeswitch:3.15eq1.10.6-r2
freeswitch:edgeeq1.10.6-r0
freeswitch:edgeeq1.10.5-r2

Name	Operator	Version
freeswitch:edge	eq	1.10.6-r0
freeswitch:edge	eq	1.10.5-r2
freeswitch:edge	eq	1.10.3-r0
freeswitch:edge	eq	1.10.6-r2
freeswitch:edge	eq	1.10.2-r0
freeswitch:edge	eq	1.8.7-r1
freeswitch:edge	eq	1.10.6-r1
freeswitch:3.15	eq	1.10.6-r2
freeswitch:edge	eq	1.10.6-r0
freeswitch:edge	eq	1.10.5-r2

Rows per page:

1-10 of 161

References

seclists.org/fulldisclosure/2021/Oct/41

github.com/signalwire/freeswitch/commit/b21dd4e7f3a6f1d5f7be3ea500a319a5bc11db9e

github.com/signalwire/freeswitch/releases/tag/v1.10.6

github.com/signalwire/freeswitch/security/advisories/GHSA-g7xg-7c54-rmpj

secdb.alpinelinux.org/edge/main.yaml

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

Related for VERACODE:32827