vulnerability

Alpine Linux: CVE-2022-42706: Path Traversal

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:M/C:C/I:N/A:N)

Published

Dec 5, 2022

Added

Mar 26, 2024

Modified

Jun 18, 2026

Description

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.

Solution

alpine-linux-upgrade-asterisk

References

CVE-2022-42706
https://attackerkb.com/topics/CVE-2022-42706
https://security.alpinelinux.org/vuln/CVE-2022-42706
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-45772
CWE-22
EUVD-EUVD-2022-45772

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report