CVE-2014-7235

{"id": "CVE-2014-7235", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-10-07T14:55:09.093", "references": [{"url": "http://community.freepbx.org/t/critical-freepbx-rce-vulnerability-all-versions-cve-2014-7235/24536", "source": "cve@mitre.org"}, {"url": "http://packetstormsecurity.com/files/128516/FreePBX-Authentication-Bypass-Account-Creation.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/61601", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/70188", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96790", "source": "cve@mitre.org"}, {"url": "https://github.com/FreePBX/fw_ari/commit/f294b4580ce725ca3c5e692d86e63d40cef4d836", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/41005/", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ari_auth cookie, related to the PHP unserialize function, as exploited in the wild in September 2014."}, {"lang": "es", "value": "En el archivo htdocs_ari/includes/login.php en el m\u00f3dulo del Framework ARI/Asterisk Recording Interface (ARI) en FreePBX anterior a versi\u00f3n 2.9.0.9, versiones 2.10.x y versiones 2.11 anteriores a 2.11.1.5, permite a los atacantes remotos ejecutar c\u00f3digo arbitrario por medio de la cookie ari_auth, relacionada con la funci\u00f3n unserialize de PHP, como se explot\u00f3 \u201cin the wild\u201d en septiembre de 2014."}], "lastModified": "2019-12-10T16:01:50.690", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:freepbx:freepbx:2.10.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6317E737-4318-4986-AC41-9F69BEEE57C1"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.10.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5B24685-54DE-4F76-AC05-3CA32A63E34D"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.10.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "182B7950-427E-4F48-968D-125DC480F00F"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.10.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4126EAD1-F307-4252-B951-AF6BA8AB50AF"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.10.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38BD066D-9777-4D58-B283-38C35BD97171"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.10.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7035B567-4728-4E8C-B27C-5C37445C89C8"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.10.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A591ECCE-6DBC-45BE-908F-BC5D8D817DDA"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.10.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A284DA73-FD42-4C79-A4B7-3A1848F3883B"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.10.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F04952AA-A9F1-4C2F-A19A-5DF5D4CB27AD"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.10.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA512E0C-5E77-4D67-8E49-D6F5B7DCE87F"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.10.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F29B0F2-C3A3-401C-A8D1-842E1D660BCF"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.11.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61D4517F-EDED-49C3-B0E7-72703D49D78E"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.11.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "787A42CA-870B-4595-8234-93C6E3D68A51"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.11.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "697C8EA2-5E93-46A8-B604-49DDCEA8B0D9"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.11.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A082A340-769A-4925-AA29-4334B4940F10"}, {"criteria": "cpe:2.3:a:freepbx:freepbx:2.11.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04B6860F-F3D1-42E4-908D-789E26F00640"}, {"criteria": "cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "575E3DA5-B8DE-47CC-A322-50EE531A5365", "versionEndIncluding": "2.9.0.8"}, {"criteria": "cpe:2.3:a:sangoma:freepbx:2.11.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "90B28D54-5FBD-403C-BA01-3D2CF2F8D8FB"}, {"criteria": "cpe:2.3:a:sangoma:freepbx:2.11.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37704860-CB88-4182-9928-35A2CCDDA0D0"}, {"criteria": "cpe:2.3:a:sangoma:freepbx:2.11.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30DB72FB-2D60-4C78-B2E3-A54857FA382E"}, {"criteria": "cpe:2.3:a:sangoma:freepbx:2.11.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A36B78CA-1130-4045-99C3-339132F4ED66"}, {"criteria": "cpe:2.3:a:sangoma:freepbx:2.11.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0675B567-E2FB-4870-BD42-5CB97DA1B9E9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}