Back to Database
Status published
Unknown
CVE-2022-42706
An issue was discovered in Sangoma Asterisk through 16.28, 17...
Vulnerability Description
An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-42706
Credits & Attribution
No credits recorded in the NVD database.
References
More from sangoma
View All →CVE-2022-42705
A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6,...
Unknown
0
CVE-2022-37325
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0,...
Unknown
0
CVE-2021-45461
FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40,...
Critical
9.8
CVE-2021-45310
Sangoma Technologies Corporation Switchvox Version 102409 is affected by an...
Medium
5.3
CVE-2020-10666
The restapps (aka Rest Phone apps) module for Sangoma FreePBX...
Critical
9.8
Affected Vendor
sangoma
View all reports →Affected Software
asterisk, certified asterisk
Vulnerable Versions:
16.0.0, 17.0.0, 19.0.0, 20.0.0, 0, 18.9
Timeline
Official Publish:
December 5th, 2022
Last Modified:
April 24th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.