← Back to CVE List

CVE-2022-42706

Published: 2022-12-05T21:15Z
Last Modified: 2024-11-21T07:25Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt