Test ID:	1.3.6.1.4.1.25623.1.0.105874
Category:	Web application abuses
Title:	FreePBX RCE Vulnerability (Aug 2016) - Active Check
Summary:	A remote command execution (RCE) vulnerability that results in; privileged escalation exists in FreePBX 13 and FreePBX 14 with `Recordings' versions between; 13.0.12 and 13.0.26.
Description:	Summary: A remote command execution (RCE) vulnerability that results in privileged escalation exists in FreePBX 13 and FreePBX 14 with `Recordings' versions between 13.0.12 and 13.0.26. Vulnerability Insight: The recordings module lets you playback recorded files. Due to a coding error, certain Ajax requests were unauthenticated when requesting files. This allowed shell execution and privileged escalation if triggered correctly. Affected Software/OS: FreePBX with System Recordings Module versions 13.0.1beta1 through 13.0.26. Solution: Update the Recordings module to version 13.0.27 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.