CVE-2023-26567: Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO ..
sangoma
•
Apr 26, 2023
•
May 5, 2023
Description
Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS, AMPMGRUSER, and AMPMGRPASS in the list of global variables. This exposes cleartext authentication credentials for the Asterisk Database (MariaDB/MySQL) and Asterisk Manager Interface. For example, an attacker can make a /ari/asterisk/variable?variable=AMPDBPASS API call.
Products affected:
sangoma» freepbx_linux_7 » 1805
sangoma» freepbx_linux_7 » 1904
sangoma» freepbx_linux_7 » 1910
sangoma» freepbx_linux_7 » 2002
sangoma» freepbx_linux_7 » 2008
sangoma» freepbx_linux_7 » 2011
sangoma» freepbx_linux_7 » 2104
sangoma» freepbx_linux_7 » 2105
sangoma» freepbx_linux_7 » 2109
sangoma» freepbx_linux_7 » 2112
sangoma» freepbx_linux_7 » 2201
sangoma» freepbx_linux_7 » 2202
sangoma» freepbx_linux_7 » 2203
sangoma» freepbx_linux_7 » 2302
In a few clicks Akto can analyze your API attack surface and see what APIs are vulnerable to OWASP Top 10 and other common CWEs.
Severity
8.1
/
10
CVSS base metrics
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
User interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE
Exploitability Score
2.8
Impact Score
5.2
Weakness
CWE-522__
Learn from academy
What is API?
Types of APIs
REST API
GraphQL
JSON-RPC
XML-RPC
SOAP API
REST vs SOAP
GraphQL vs REST
GET Method
POST Method
PUT Method
DELETE Method
GET vs POST
PUT vs POST
GraphQL Authentication and Authorization
GraphQL Introspection
GraphQL Query
GraphQL Mutation
GraphQL Pagination
GraphQL Subscription
GraphQL Fragment
API Documentation
Swagger for API Documentation
OpenAPI Specification
Authentication
Authorization
Detect Insecure Dependencies using GitHub Copilot
Detect SQL Injection Using Github Copilot
Ensure Data Encryption using Github Copilot
Validate Input Sanitization using Github Copilot
Review Authentication Mechanism using Github Copilot
Check for Secure Communication Protocols using Github Copilot
How Github Copilot Helps in Auditing Logging Practices
Enforce Principle of Least Privilege with GitHub Copilot
Secure File Uploads with GitHub Copilot
Find CSRF Vulnerabilities with GitHub Copilot
Detect Hardcoded Secrets with GitHub Copilot
Assess CORS Configuration with GitHub Copilot
Evaluate Session Management with GitHub Copilot
Related tests
JWT authentication bypass via jku header injection
eSMTP - Config Discovery
Nginx - Git Configuration Exposure
Laravel - Sensitive Information Disclosure
Docker Container - Misconfiguration Exposure
Msmtp - Config Exposure
Parameters.yml - File Discovery
Mongo Express - Unauthenticated Access
Apache Airflow Configuration Exposure
Dockerrun AWS Configuration Exposure
Apache Config file disclosure
Appspec Yml Disclosure
Explore more from Akto
Blog
Be updated about everything related to API Security, new API vulnerabilities, industry news and product updates.
Test Library
Discover and find tests from Akto's 100+ API Security test library. Choose your template or add a new template to start your API Security testing.
Documentation
Check out Akto's product documentation for all information related to features and how to use them.