SED Command Overloading FreePBX Server

[billsimon]

It was discussed quite a bit on this forum near the end of last month. The path to exploit was through the restapps module.

SECURITY ISSUE - Potential Rest Phone Apps RCE

On the afternoon of December 21, 2021 Sangoma received a report of malicious activity in progress on a fully up to date FreePBX 15 system. Technical details followed very quickly, and engineering was able to act within minutes of the report. Investigation revealed that the vulnerability to be in the FreePBX and PBXact Phone Apps (restapps) module, in published versions 16.0.18.40, 16.0.18.41, 15.0.19.87 and 15.0.19.88. Other major FreePBX or PBXact versions are not affected. The affected module …