FreePBX Community Forums

Can't login invalid password /admin 403 forbidden

Distro Discussion & Help

tm1000 (Andrew Nagy) October 30, 2014, 7:58pm 2

Critical FreePBX RCE Vulnerability (ALL Versions) CVE-2014-7235 Security

##Critical FreePBX RCE Vulnerability (ALL Versions) CVE: 2014-7235 Date: 2014-09-30 Author: James Finstrom Ticket: http://issues.freepbx.org/browse/FREEPBX-8070 UPDATE: Please run the commands in http://wiki.freepbx.org/display/L1/FreePBX+Security+Scan We have been made aware of a critical Zero-Day Remote Code Execution and Privilege Escalation exploit within the legacy “FreePBX ARI Framework module/Asterisk Recording Interface (ARI)”. This affects any user who has installed FreePBX pr…

show post in topic

Home
Categories
FAQ/Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled