CVE-2019-16990: Path Traversal
Published Oct 21, 2019
·Updated
In FusionPBX up to v4.5.7, the file app/musiconhold/musiconhold.php uses an unsanitized "file" variable coming from the URL, which takes any pathname (base64 encoded) and allows a download of it.
Affected Software
1 affected component
FusionPBX Fusionpbx<=4.5.7
Remediation
Event History
Oct 21, 2019
CVE Published
via MITRE·02:20 PM
Data Sourced
via MITRE·02:20 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-16990?
CVE-2019-16990 has a high severity rating as it allows attackers to download arbitrary files due to path traversal vulnerabilities.
2
How do I fix CVE-2019-16990?
To fix CVE-2019-16990, upgrade FusionPBX to version 4.5.8 or later, which addresses the unsanitized file variable issue.
3
What software versions are affected by CVE-2019-16990?
CVE-2019-16990 affects FusionPBX versions up to and including 4.5.7.
4
What type of vulnerability is CVE-2019-16990?
CVE-2019-16990 is a path traversal vulnerability that allows unauthorized file downloads.
5
What should I do if I cannot upgrade FusionPBX for CVE-2019-16990?
If you cannot upgrade, consider implementing input validation and restricting access to the music_on_hold.php file as temporary mitigations.