PT-2023-7804 · Unknown+3 · Certified Asterisk+3

Avocadio · Publicado 2023-12-14 · Atualizado 2025-02-13 · CVE-2023-49294

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Asterisk versions prior to 18.20.1, 20.5.1, and 21.0.1 certified-asterisk versions prior to 18.9-cert6

Description The issue is related to the Asterisk Management Interface (AMI) and is caused by incorrect restriction of the directory path name with limited access. This allows an attacker to read arbitrary files using the GetConfig command, even when the live dangerously option is not enabled.

Recommendations For Asterisk versions prior to 18.20.1, update to version 18.20.1 or later. For Asterisk versions prior to 20.5.1, update to version 20.5.1 or later. For Asterisk versions prior to 21.0.1, update to version 21.0.1 or later. For certified-asterisk versions prior to 18.9-cert6, update to a version that contains the fix for this issue. As a temporary workaround, consider restricting access to the AMI interface until a patch is applied.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

ALT-PU-2025-2613

BDU:2023-08871

CVE-2023-49294

DLA-3696-1

DSA-5596-1

GHSA-8857-HFMW-VG8F

Produtos afetados

Alt Linux

Asterisk

Red Os

Certified Asterisk

Referências · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49294.json · Exploit
• https://github.com/asterisk/asterisk/commit/424be345639d75c6cb7d0bd2da5f0f407dbd0bd5 · Correção
• https://github.com/asterisk/asterisk/blob/master/main/manager.c#L3757 · Nota
• https://github.com/asterisk/asterisk/security/advisories/GHSA-8857-hfmw-vg8f · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-49294 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-49294 · Aviso do Fabricante
• https://t.me/cvenotify/64449 · Publicação no Telegram
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-49294 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2023-49294 · Aviso do Fabricante
• https://t.me/cvenotify/65541 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-08871 · Nota de Segurança
• https://twitter.com/RedPacketSec/status/1775086932248141958 · Publicação no Twitter
• https://wiki.miko.ru/kb:asterisk:ami:getconfig · Nota
• https://osv.dev/vulnerability/DLA-3696-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-5596-1 · Aviso do Fabricante