Summary
Asterisk is prone to a security-bypass vulnerability.
Attackers can exploit this issue to bypass access control list (ACL) rules, which may lead to other attacks.
Solution
Updates are available. Please see the references for details.
References
Severity
Classification
-
CVE CVE-2010-1224 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities
- Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability (Windows)
- Adobe Flash Player Unspecified Cross-Site Scripting Vulnerability June-2011 (Linux)
- Apache Tomcat servlet/JSP container default files
- Apple Mac OS X Multiple Vulnerabilities - 02 Jan14
- Adobe Flash Player Multiple Security Bypass Vulnerabilities - 01 Feb14 (Windows)