PT-2023-7804 · Unknown+3 · Certified Asterisk+3

Avocadio · Published 2023-12-14 · Updated 2025-02-13 · CVE-2023-49294

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Asterisk versions prior to 18.20.1, 20.5.1, and 21.0.1 certified-asterisk versions prior to 18.9-cert6

Description The issue is related to the Asterisk Management Interface (AMI) and is caused by incorrect restriction of the directory path name with limited access. This allows an attacker to read arbitrary files using the GetConfig command, even when the live dangerously option is not enabled.

Recommendations For Asterisk versions prior to 18.20.1, update to version 18.20.1 or later. For Asterisk versions prior to 20.5.1, update to version 20.5.1 or later. For Asterisk versions prior to 21.0.1, update to version 21.0.1 or later. For certified-asterisk versions prior to 18.9-cert6, update to a version that contains the fix for this issue. As a temporary workaround, consider restricting access to the AMI interface until a patch is applied.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALT-PU-2025-2613

BDU:2023-08871

CVE-2023-49294

DLA-3696-1

DSA-5596-1

GHSA-8857-HFMW-VG8F

Affected Products

Alt Linux

Asterisk

Red Os

Certified Asterisk

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49294.json · Exploit
• https://github.com/asterisk/asterisk/commit/424be345639d75c6cb7d0bd2da5f0f407dbd0bd5 · Patch
• https://github.com/asterisk/asterisk/security/advisories/GHSA-8857-hfmw-vg8f · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-49294 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-49294 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-49294 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2023-49294 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08871 · Security Note
• https://osv.dev/vulnerability/DLA-3696-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5596-1 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-49294 · Security Note
• https://osv.dev/vulnerability/CVE-2023-49294 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-49294 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-49294 · Security Note