CVE-2019-19006
Sangoma · Published November 21, 2019
9.8
CVSS v3.1
CRITICALCISA KEV — Federal agencies must patch by deadline
Actively exploited in the wild
Patch availableGet patch
Description
Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.
Affected Products
- Freepbx <= 13.0.197.13
- Freepbx <= 14.0.13.11
- Freepbx <= 15.0.16.26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H