Asterisk Recording Interface Multiple Vulnerabilities
Data de publicação: 21 julho 2015
Schweregrad: : Medium
Data do informe: 21 julho 2015
Descrição
The Asterisk Recording Interface is prone to the following issues:
1. Multiple security bypass vulnerabilities.
2. A cross-site request-forgery vulnerability.
3. A cross-site scripting vulnerability.
Attackers can exploit these issues to steal cookie-based authentication credentials, gain unauthorized access to the application, bypass certain security restrictions, disclose sensitive information, or cause denial-of-service conditions.
Exposição das informações
Apply associated Trend Micro DPI Rules.
Solução
Trend Micro Deep Security DPI Rule Number: 1000552
Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention
Software infectado e versão:
- Asterisk