Vasilis Sikkis

**Nome do software vulnerável e versões afetadas** Versões 1805 a 2203 do Sangoma FreePBX **Descrição** O problema diz respeito a credenciais codificadas na interface REST do Asterisk (ARI) no Sangoma FreePBX, permitindo que invasores remotos reconfigurem o Asterisk e realizem chamadas externas e internas por meio de solicitações HTTP e WebSocket enviadas à API. **Recomendações** Para as versões 1805 a 2203, atualize o sistema para remover as credenciais codificadas na interface REST do Asterisk (ARI) e impedir o acesso não autorizado. Como solução temporária, considere restringir o acesso à interface REST do Asterisk (ARI) até que um patch esteja disponível.

**Name of the Vulnerable Software and Affected Versions** Sangoma FreePBX versions 1805 through 2302 **Description** The issue exposes cleartext authentication credentials for the Asterisk Database (MariaDB/MySQL) and Asterisk Manager Interface by placing `AMPDBUSER`, `AMPDBPASS`, `AMPMGRUSER`, and `AMPMGRPASS` in the list of global variables. An attacker can exploit this by making a "/ari/asterisk/variable?variable=AMPDBPASS" API call. **Recommendations** For Sangoma FreePBX versions 1805 through 2302, consider restricting access to the `/ari/asterisk/variable` API endpoint to minimize the risk of exploitation. Additionally, avoid using the variables `AMPDBUSER`, `AMPDBPASS`, `AMPMGRUSER`, and `AMPMGRPASS` in global variables until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM API Connect versions 5.0.0.0 through 5.0.8.2 **Description** The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session due to cross-site scripting. **Recommendations** For versions 5.0.0.0 through 5.0.8.2, update to a version that contains a fix for this issue to prevent cross-site scripting attacks.