{"id":"CVE-2019-19006","details":"Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.","modified":"2026-04-10T04:16:44.582012Z","published":"2019-11-21T18:15:11.993Z","references":[{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-19006"},{"type":"WEB","url":"https://pastebin.com/2CdsQMKW"},{"type":"ADVISORY","url":"https://community.freepbx.org/t/freepbx-security-vulnerability-sec-2019-001/62772"},{"type":"ADVISORY","url":"https://wiki.freepbx.org/display/FOP/2019-11-20+Remote+Admin+Authentication+Bypass"},{"type":"ARTICLE","url":"https://www.freepbx.org/category/blog/"},{"type":"EVIDENCE","url":"https://research.checkpoint.com/2020/inj3ctor3-operation-leveraging-asterisk-servers-for-monetization/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/freepbx/framework","events":[{"introduced":"0"},{"last_affected":"fc03c2457d2ddbd5ce9516cb150ddcf8b8f2a78a"},{"introduced":"0"},{"last_affected":"77af77af5bbdb58ec1fde00f440cc16ddfc7c229"},{"introduced":"0"},{"last_affected":"5b622696aad2d21dcaf1502112f7d0248bad5ecf"}],"database_specific":{"versions":[{"introduced":"13.0.0.0"},{"last_affected":"13.0.197.13"},{"introduced":"14.0.0.0"},{"last_affected":"14.0.13.11"},{"introduced":"15.0.0.0"},{"last_affected":"15.0.16.26"}]}}],"versions":["release/12.0.0.0alpha1.0","release/12.0.1alpha1","release/12.0.1alpha10","release/12.0.1alpha11","release/12.0.1alpha12","release/12.0.1alpha13","release/12.0.1alpha14","release/12.0.1alpha16","release/12.0.1alpha17","release/12.0.1alpha18","release/12.0.1alpha19","release/12.0.1alpha2","release/12.0.1alpha20","release/12.0.1alpha21","release/12.0.1alpha22","release/12.0.1alpha23","release/12.0.1alpha24","release/12.0.1alpha25","release/12.0.1alpha26","release/12.0.1alpha27","release/12.0.1alpha28","release/12.0.1alpha29","release/12.0.1alpha3","release/12.0.1alpha30","release/12.0.1alpha31","release/12.0.1alpha32","release/12.0.1alpha4","release/12.0.1alpha5","release/12.0.1alpha7","release/13.0.10","release/13.0.100","release/13.0.101","release/13.0.102","release/13.0.103","release/13.0.104","release/13.0.105","release/13.0.106","release/13.0.107","release/13.0.108","release/13.0.109","release/13.0.11","release/13.0.110","release/13.0.111","release/13.0.112","release/13.0.113","release/13.0.114","release/13.0.115","release/13.0.116","release/13.0.117","release/13.0.119","release/13.0.12","release/13.0.120","release/13.0.121","release/13.0.122","release/13.0.123","release/13.0.124","release/13.0.125","release/13.0.126","release/13.0.127","release/13.0.128","release/13.0.129","release/13.0.13","release/13.0.130","release/13.0.131","release/13.0.132","release/13.0.133","release/13.0.134","release/13.0.135","release/13.0.136","release/13.0.137","release/13.0.138","release/13.0.139","release/13.0.14","release/13.0.140","release/13.0.141","release/13.0.142","release/13.0.143","release/13.0.144","release/13.0.145","release/13.0.146","release/13.0.147","release/13.0.148","release/13.0.149","release/13.0.15","release/13.0.150","release/13.0.151","release/13.0.152","release/13.0.153","release/13.0.154","release/13.0.155","release/13.0.156","release/13.0.157","release/13.0.158","release/13.0.159","release/13.0.16","release/13.0.160","release/13.0.161","release/13.0.162","release/13.0.163","release/13.0.164","release/13.0.165","release/13.0.166","release/13.0.167","release/13.0.168","release/13.0.169","release/13.0.17","release/13.0.171","release/13.0.172","release/13.0.173","release/13.0.174","release/13.0.175","release/13.0.176","release/13.0.177","release/13.0.178","release/13.0.179","release/13.0.18","release/13.0.180","release/13.0.181","release/13.0.182","release/13.0.183","release/13.0.184","release/13.0.185","release/13.0.186","release/13.0.187","release/13.0.188","release/13.0.188.1","release/13.0.188.10","release/13.0.188.11","release/13.0.188.12","release/13.0.188.13","release/13.0.188.13.1","release/13.0.188.2","release/13.0.188.3","release/13.0.188.4","release/13.0.188.5","release/13.0.188.6","release/13.0.188.7","release/13.0.188.8","release/13.0.188.9","release/13.0.189","release/13.0.189.1","release/13.0.189.2","release/13.0.189.3","release/13.0.19","release/13.0.190","release/13.0.190.1","release/13.0.190.11","release/13.0.190.12","release/13.0.190.13","release/13.0.190.14","release/13.0.190.15","release/13.0.190.16","release/13.0.190.17","release/13.0.190.18","release/13.0.190.19","release/13.0.190.2","release/13.0.190.20","release/13.0.190.3","release/13.0.190.4","release/13.0.190.5","release/13.0.190.6","release/13.0.190.7","release/13.0.190.8","release/13.0.190.9","release/13.0.191","release/13.0.191.1","release/13.0.191.10","release/13.0.191.11","release/13.0.191.12","release/13.0.191.13","release/13.0.191.2","release/13.0.191.3","release/13.0.191.4","release/13.0.191.5","release/13.0.191.6","release/13.0.191.7","release/13.0.191.8","release/13.0.191.9","release/13.0.192","release/13.0.192.1","release/13.0.192.10","release/13.0.192.11","release/13.0.192.12","release/13.0.192.13","release/13.0.192.14","release/13.0.192.15","release/13.0.192.16","release/13.0.192.17","release/13.0.192.18","release/13.0.192.19","release/13.0.192.2","release/13.0.192.20","release/13.0.192.3","release/13.0.192.4","release/13.0.192.5","release/13.0.192.6","release/13.0.192.7","release/13.0.192.8","release/13.0.192.9","release/13.0.193","release/13.0.193.1","release/13.0.193.2","release/13.0.193.3","release/13.0.194","release/13.0.194.1","release/13.0.194.10","release/13.0.194.11","release/13.0.194.2","release/13.0.194.3","release/13.0.194.4","release/13.0.194.5","release/13.0.194.6","release/13.0.194.7","release/13.0.194.8","release/13.0.194.9","release/13.0.195","release/13.0.195.1","release/13.0.195.10","release/13.0.195.11","release/13.0.195.12","release/13.0.195.13","release/13.0.195.15","release/13.0.195.16","release/13.0.195.17","release/13.0.195.18","release/13.0.195.19","release/13.0.195.2","release/13.0.195.20","release/13.0.195.21","release/13.0.195.22","release/13.0.195.23","release/13.0.195.24","release/13.0.195.25","release/13.0.195.26","release/13.0.195.27","release/13.0.195.28","release/13.0.195.3","release/13.0.195.4","release/13.0.195.5","release/13.0.195.6","release/13.0.195.7","release/13.0.195.8","release/13.0.195.9","release/13.0.196","release/13.0.196.1","release/13.0.196.2","release/13.0.197","release/13.0.197.1","release/13.0.197.10","release/13.0.197.11","release/13.0.197.13","release/13.0.197.2","release/13.0.197.3","release/13.0.197.5","release/13.0.197.6","release/13.0.197.7","release/13.0.197.8","release/13.0.197.9","release/13.0.1RC1.20","release/13.0.1RC1.21","release/13.0.1RC1.22","release/13.0.1RC1.23","release/13.0.1RC1.24","release/13.0.1RC1.25","release/13.0.1RC1.26","release/13.0.1RC1.27","release/13.0.1RC1.28","release/13.0.1RC1.30","release/13.0.1alpha10","release/13.0.1alpha11","release/13.0.1alpha12","release/13.0.1alpha14","release/13.0.1alpha15","release/13.0.1alpha16","release/13.0.1alpha17","release/13.0.1alpha18","release/13.0.1alpha19","release/13.0.1alpha2","release/13.0.1alpha20","release/13.0.1alpha21","release/13.0.1alpha22","release/13.0.1alpha23","release/13.0.1alpha24","release/13.0.1alpha25","release/13.0.1alpha26","release/13.0.1alpha27","release/13.0.1alpha28","release/13.0.1alpha29","release/13.0.1alpha3","release/13.0.1alpha30","release/13.0.1alpha31","release/13.0.1alpha32","release/13.0.1alpha33","release/13.0.1alpha34","release/13.0.1alpha35","release/13.0.1alpha36","release/13.0.1alpha37","release/13.0.1alpha38","release/13.0.1alpha39","release/13.0.1alpha4","release/13.0.1alpha40","release/13.0.1alpha41","release/13.0.1alpha42","release/13.0.1alpha43","release/13.0.1alpha44","release/13.0.1alpha45","release/13.0.1alpha46","release/13.0.1alpha47","release/13.0.1alpha48","release/13.0.1alpha49","release/13.0.1alpha5","release/13.0.1alpha50","release/13.0.1alpha51","release/13.0.1alpha52","release/13.0.1alpha53","release/13.0.1alpha54","release/13.0.1alpha55","release/13.0.1alpha56","release/13.0.1alpha57","release/13.0.1alpha58","release/13.0.1alpha59","release/13.0.1alpha6","release/13.0.1alpha60","release/13.0.1alpha61","release/13.0.1alpha62","release/13.0.1alpha63","release/13.0.1alpha64","release/13.0.1alpha65","release/13.0.1alpha66","release/13.0.1alpha67","release/13.0.1alpha68","release/13.0.1alpha69","release/13.0.1alpha7","release/13.0.1alpha8","release/13.0.1alpha9","release/13.0.1beta1","release/13.0.1beta2","release/13.0.1beta3","release/13.0.1beta3.1","release/13.0.1beta3.10","release/13.0.1beta3.11","release/13.0.1beta3.12","release/13.0.1beta3.13","release/13.0.1beta3.14","release/13.0.1beta3.15","release/13.0.1beta3.16","release/13.0.1beta3.17","release/13.0.1beta3.18","release/13.0.1beta3.19","release/13.0.1beta3.2","release/13.0.1beta3.20","release/13.0.1beta3.21","release/13.0.1beta3.22","release/13.0.1beta3.23","release/13.0.1beta3.24","release/13.0.1beta3.25","release/13.0.1beta3.3","release/13.0.1beta3.4","release/13.0.1beta3.5","release/13.0.1beta3.53","release/13.0.1beta3.54","release/13.0.1beta3.55","release/13.0.1beta3.56","release/13.0.1beta3.57","release/13.0.1beta3.58","release/13.0.1beta3.59","release/13.0.1beta3.6","release/13.0.1beta3.60","release/13.0.1beta3.61","release/13.0.1beta3.62","release/13.0.1beta3.63","release/13.0.1beta3.7","release/13.0.1beta3.9","release/13.0.20","release/13.0.22","release/13.0.23","release/13.0.24","release/13.0.25","release/13.0.26","release/13.0.27","release/13.0.28","release/13.0.29","release/13.0.30","release/13.0.31","release/13.0.33","release/13.0.34","release/13.0.35","release/13.0.36","release/13.0.37","release/13.0.38","release/13.0.39","release/13.0.4","release/13.0.41","release/13.0.42","release/13.0.43","release/13.0.44","release/13.0.45","release/13.0.46","release/13.0.47","release/13.0.48","release/13.0.49","release/13.0.5","release/13.0.50","release/13.0.51","release/13.0.52","release/13.0.53","release/13.0.54","release/13.0.55","release/13.0.56","release/13.0.57","release/13.0.58","release/13.0.59","release/13.0.6","release/13.0.60","release/13.0.61","release/13.0.61.1","release/13.0.61.2","release/13.0.61.3","release/13.0.61.4","release/13.0.62","release/13.0.63","release/13.0.64","release/13.0.65","release/13.0.66","release/13.0.67","release/13.0.68","release/13.0.69","release/13.0.7","release/13.0.70","release/13.0.71","release/13.0.72","release/13.0.73","release/13.0.74","release/13.0.76","release/13.0.77","release/13.0.78","release/13.0.79","release/13.0.8","release/13.0.80","release/13.0.81","release/13.0.82","release/13.0.83","release/13.0.84","release/13.0.85","release/13.0.86","release/13.0.87","release/13.0.88","release/13.0.89","release/13.0.9","release/13.0.90","release/13.0.91","release/13.0.92","release/13.0.95","release/13.0.96","release/13.0.97","release/13.0.98","release/13.0.99","release/14.0.1","release/14.0.1.1","release/14.0.1.10","release/14.0.1.11","release/14.0.1.12","release/14.0.1.13","release/14.0.1.14","release/14.0.1.15","release/14.0.1.16","release/14.0.1.18","release/14.0.1.19","release/14.0.1.2","release/14.0.1.20","release/14.0.1.21","release/14.0.1.22","release/14.0.1.23","release/14.0.1.24","release/14.0.1.25","release/14.0.1.26","release/14.0.1.27","release/14.0.1.28","release/14.0.1.29","release/14.0.1.3","release/14.0.1.30","release/14.0.1.31","release/14.0.1.32","release/14.0.1.33","release/14.0.1.34","release/14.0.1.35","release/14.0.1.36","release/14.0.1.4","release/14.0.1.5","release/14.0.1.6","release/14.0.1.7","release/14.0.1.8","release/14.0.1.9","release/14.0.12","release/14.0.12.1","release/14.0.12.10","release/14.0.12.11","release/14.0.12.12","release/14.0.12.13","release/14.0.12.2","release/14.0.12.3","release/14.0.12.4","release/14.0.12.6","release/14.0.12.7","release/14.0.12.8","release/14.0.12.9","release/14.0.13","release/14.0.13.1","release/14.0.13.11","release/14.0.13.2","release/14.0.13.3","release/14.0.13.4","release/14.0.13.5","release/14.0.13.6","release/14.0.13.7","release/14.0.13.8","release/14.0.13.9","release/14.0.1alpha1","release/14.0.1alpha10","release/14.0.1alpha11","release/14.0.1alpha12","release/14.0.1alpha13","release/14.0.1alpha14","release/14.0.1alpha15","release/14.0.1alpha16","release/14.0.1alpha17","release/14.0.1alpha18","release/14.0.1alpha19","release/14.0.1alpha2","release/14.0.1alpha20","release/14.0.1alpha21","release/14.0.1alpha22","release/14.0.1alpha23","release/14.0.1alpha24","release/14.0.1alpha25","release/14.0.1alpha26","release/14.0.1alpha27","release/14.0.1alpha28","release/14.0.1alpha29","release/14.0.1alpha3","release/14.0.1alpha30","release/14.0.1alpha31","release/14.0.1alpha32","release/14.0.1alpha33","release/14.0.1alpha34","release/14.0.1alpha35","release/14.0.1alpha4","release/14.0.1alpha5","release/14.0.1alpha6","release/14.0.1alpha7","release/14.0.1alpha8","release/14.0.1alpha9","release/14.0.1beta1","release/14.0.1beta10","release/14.0.1beta11","release/14.0.1beta12","release/14.0.1beta13","release/14.0.1beta14","release/14.0.1beta15","release/14.0.1beta16","release/14.0.1beta17","release/14.0.1beta18","release/14.0.1beta19","release/14.0.1beta2","release/14.0.1beta20","release/14.0.1beta3","release/14.0.1beta4","release/14.0.1beta5","release/14.0.1beta6","release/14.0.1beta7","release/14.0.1beta8","release/14.0.1beta9","release/14.0.1rc1","release/14.0.1rc1.1","release/14.0.1rc1.10","release/14.0.1rc1.11","release/14.0.1rc1.12","release/14.0.1rc1.13","release/14.0.1rc1.14","release/14.0.1rc1.15","release/14.0.1rc1.16","release/14.0.1rc1.17","release/14.0.1rc1.18","release/14.0.1rc1.19","release/14.0.1rc1.2","release/14.0.1rc1.21","release/14.0.1rc1.22","release/14.0.1rc1.23","release/14.0.1rc1.24","release/14.0.1rc1.25","release/14.0.1rc1.26","release/14.0.1rc1.27","release/14.0.1rc1.29","release/14.0.1rc1.3","release/14.0.1rc1.30","release/14.0.1rc1.4","release/14.0.1rc1.5","release/14.0.1rc1.6","release/14.0.1rc1.7","release/14.0.1rc1.8","release/14.0.2.1","release/14.0.2.10","release/14.0.2.11","release/14.0.2.12","release/14.0.2.13","release/14.0.2.14","release/14.0.2.15","release/14.0.2.16","release/14.0.2.17","release/14.0.2.18","release/14.0.2.2","release/14.0.2.4","release/14.0.2.6","release/14.0.3","release/14.0.3.1","release/14.0.3.10","release/14.0.3.11","release/14.0.3.12","release/14.0.3.13","release/14.0.3.14","release/14.0.3.15","release/14.0.3.16","release/14.0.3.17","release/14.0.3.19","release/14.0.3.2","release/14.0.3.20","release/14.0.3.21","release/14.0.3.22","release/14.0.3.23","release/14.0.3.24","release/14.0.3.25","release/14.0.3.26","release/14.0.3.3","release/14.0.3.4","release/14.0.3.5","release/14.0.3.6","release/14.0.3.7","release/14.0.3.8","release/14.0.3.9","release/14.0.4","release/14.0.4.1","release/14.0.4.2","release/14.0.4.3","release/14.0.4.4","release/14.0.4.5","release/14.0.5","release/14.0.5.1","release/14.0.5.10","release/14.0.5.11","release/14.0.5.12","release/14.0.5.13","release/14.0.5.14","release/14.0.5.15","release/14.0.5.16","release/14.0.5.17","release/14.0.5.18","release/14.0.5.19","release/14.0.5.2","release/14.0.5.20","release/14.0.5.21","release/14.0.5.22","release/14.0.5.23","release/14.0.5.24","release/14.0.5.25","release/14.0.5.26","release/14.0.5.27","release/14.0.5.28","release/14.0.5.3","release/14.0.5.4","release/14.0.5.5","release/14.0.5.6","release/14.0.5.7","release/14.0.5.8","release/14.0.5.9","release/14.0.7.1","release/14.0.7.2","release/14.0.7.3","release/14.0.7.4","release/14.0.7.5","release/14.0.7.6","release/14.0.7.7","release/14.0.8","release/14.0.8.1","release/14.0.8.2","release/14.0.8.3","release/14.0.8.4","release/15.0.1.1","release/15.0.1.10","release/15.0.1.11","release/15.0.1.12","release/15.0.1.13","release/15.0.1.14","release/15.0.1.15","release/15.0.1.16","release/15.0.1.17","release/15.0.1.18","release/15.0.1.19","release/15.0.1.2","release/15.0.1.21","release/15.0.1.22","release/15.0.1.23","release/15.0.1.24","release/15.0.1.25","release/15.0.1.26","release/15.0.1.27","release/15.0.1.28","release/15.0.1.29","release/15.0.1.3","release/15.0.1.30","release/15.0.1.31","release/15.0.1.32","release/15.0.1.33","release/15.0.1.34","release/15.0.1.35","release/15.0.1.36","release/15.0.1.37","release/15.0.1.38","release/15.0.1.39","release/15.0.1.4","release/15.0.1.40","release/15.0.1.41","release/15.0.1.42","release/15.0.1.5","release/15.0.1.6","release/15.0.1.7","release/15.0.1.8","release/15.0.1.9","release/15.0.10","release/15.0.10.1","release/15.0.10.2","release/15.0.10.3","release/15.0.11","release/15.0.11.1","release/15.0.12","release/15.0.14","release/15.0.15","release/15.0.15.1","release/15.0.15.2","release/15.0.15.3","release/15.0.15.4","release/15.0.16","release/15.0.16.1","release/15.0.16.10","release/15.0.16.11","release/15.0.16.12","release/15.0.16.13","release/15.0.16.14","release/15.0.16.15","release/15.0.16.16","release/15.0.16.17","release/15.0.16.18","release/15.0.16.19","release/15.0.16.2","release/15.0.16.20","release/15.0.16.21","release/15.0.16.22","release/15.0.16.23","release/15.0.16.26","release/15.0.16.3","release/15.0.16.4","release/15.0.16.5","release/15.0.16.6","release/15.0.16.7","release/15.0.16.8","release/15.0.16.9","release/15.0.1alpha2","release/15.0.1alpha3","release/15.0.1beta1","release/15.0.1beta2","release/15.0.1beta3","release/15.0.2","release/15.0.2.1","release/15.0.2.10","release/15.0.2.11","release/15.0.2.12","release/15.0.2.13","release/15.0.2.14","release/15.0.2.15","release/15.0.2.16","release/15.0.2.2","release/15.0.2.3","release/15.0.2.4","release/15.0.2.5","release/15.0.2.6","release/15.0.2.7","release/15.0.2.8","release/15.0.2.9","release/15.0.3","release/15.0.4","release/15.0.5","release/15.0.5.1","release/15.0.5.11","release/15.0.5.12","release/15.0.5.13","release/15.0.5.14","release/15.0.5.2","release/15.0.5.3","release/15.0.5.6","release/15.0.5.7","release/15.0.5.8","release/15.0.5.9","release/15.0.6","release/15.0.6.1","release/15.0.6.11","release/15.0.6.12","release/15.0.6.13","release/15.0.6.14","release/15.0.6.15","release/15.0.6.16","release/15.0.6.17","release/15.0.6.18","release/15.0.6.2","release/15.0.6.3","release/15.0.6.4","release/15.0.6.5","release/15.0.6.6","release/15.0.6.7","release/15.0.6.8","release/15.0.6.9","release/15.0.7","release/15.0.8","release/15.0.8.1","release/15.0.9","release/2.11.0.0","release/2.11.0.0beta1.0","release/2.11.0.0beta1.1","release/2.11.0.0beta1.2","release/2.11.0.0beta1.3","release/2.11.0.0beta1.4","release/2.11.0.0beta1.5","release/2.11.0.0beta2.0","release/2.11.0.0beta2.1","release/2.11.0.0beta2.2","release/2.11.0.0beta2.3","release/2.11.0.0beta2.4","release/2.11.0.0beta2.5","release/2.11.0.0beta2.6","release/2.11.0.0beta2.8","release/2.11.0.0beta2.9","release/2.11.0.0rc1.0","release/2.11.0.0rc1.1","release/2.11.0.0rc1.2","release/2.11.0.0rc1.3","release/2.11.0.0rc1.4","release/2.11.0.0rc1.5","release/2.11.0.0rc1.7","release/2.11.0.1","release/2.11.0.10","release/2.11.0.11","release/2.11.0.2","release/2.11.0.3","release/2.11.0.4","release/2.11.0.5","release/2.11.0.6","release/2.11.0.7","release/2.11.0.8","release/2.11.0.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-19006.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}