[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpjQvPunyKKIb3zP-VigdypzyUzdgT1B-W_G1GTszyRM":3,"g5a-risk:CVE-2023-26567":180},{"success":4,"data":5,"meta":177},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":81,"references":82,"referencesCount":103,"weaknesses":104,"weaknessesCount":113,"isActivelyExploited":114,"cisaInfo":26,"otxData":26,"relatedBlogPosts":115,"seoMetadata":116,"configurations":141,"relatedVendorCves":175,"notableEvents":176},"CVE-2023-26567","What is CVE-2023-26567?","Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS, AMPMGRUSER, and AMPMGRPASS in the list of global variables. This exposes cleartext authentication credentials for the Asterisk Database (MariaDB\u002FMySQL) and Asterisk Manager Interface. For example, an attacker can make a \u002Fari\u002Fasterisk\u002Fvariable?variable=AMPDBPASS API call.","Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS, AMPMGRUSER, and AMPMGRPASS in the list of global variables. Th...","2023-04-26T20:15:09.86","2025-02-03T18:15:28.833",8.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.2,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00649,[33,33,33,33,33,33,33],"High",[37,42,45,48,51,54,57,60,63,66,69,72,75,78],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"sangoma","freepbx_linux_7","1805","cpe:2.3:a:sangoma:freepbx_linux_7:1805:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"1904","cpe:2.3:a:sangoma:freepbx_linux_7:1904:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"1910","cpe:2.3:a:sangoma:freepbx_linux_7:1910:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":49,"criteria":50,"vulnerable":4},"2002","cpe:2.3:a:sangoma:freepbx_linux_7:2002:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":52,"criteria":53,"vulnerable":4},"2008","cpe:2.3:a:sangoma:freepbx_linux_7:2008:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":55,"criteria":56,"vulnerable":4},"2011","cpe:2.3:a:sangoma:freepbx_linux_7:2011:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":58,"criteria":59,"vulnerable":4},"2104","cpe:2.3:a:sangoma:freepbx_linux_7:2104:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":61,"criteria":62,"vulnerable":4},"2105","cpe:2.3:a:sangoma:freepbx_linux_7:2105:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":64,"criteria":65,"vulnerable":4},"2109","cpe:2.3:a:sangoma:freepbx_linux_7:2109:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":67,"criteria":68,"vulnerable":4},"2112","cpe:2.3:a:sangoma:freepbx_linux_7:2112:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":70,"criteria":71,"vulnerable":4},"2201","cpe:2.3:a:sangoma:freepbx_linux_7:2201:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":73,"criteria":74,"vulnerable":4},"2202","cpe:2.3:a:sangoma:freepbx_linux_7:2202:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":76,"criteria":77,"vulnerable":4},"2203","cpe:2.3:a:sangoma:freepbx_linux_7:2203:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":79,"criteria":80,"vulnerable":4},"2302","cpe:2.3:a:sangoma:freepbx_linux_7:2302:*:*:*:*:*:*:*",14,[83,88,93,97,99,101],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fqsecure.com.cy\u002Fresources\u002Fadvisories\u002Fsangoma-freepbx-linux-insecure-permissions","Com",[87],"Third Party Advisory",{"url":89,"source":90,"tags":91},"https:\u002F\u002Fwww.freepbx.org","Freepbx",[92],"Product",{"url":94,"source":95,"tags":96},"https:\u002F\u002Fwww.sangoma.com\u002Fproducts\u002Fopen-source\u002F","Sangoma",[92],{"url":84,"source":85,"tags":98},[87],{"url":89,"source":90,"tags":100},[92],{"url":94,"source":95,"tags":102},[92],6,[105],{"id":106,"name":107,"description":108,"extendedDescription":109,"status":110,"abstraction":111,"structure":112},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class","Simple",1,false,[],{"title":117,"metaDescription":118,"keywords":119,"canonicalUrl":120,"structuredData":121},"What is CVE-2023-26567? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-26567, a high severity cyber security vulnerability from 2023. Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO...","CVE-2023-26567, CVE-2023-26567 vulnerability, CVE-2023-26567 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, sangoma security, freepbx_linux_7 vulnerability","\u002Fwhat-is\u002Fcve-2023-26567",{"@context":122,"@type":123,"headline":117,"description":118,"datePublished":10,"dateModified":11,"author":124,"publisher":128,"about":132,"mainEntityOfPage":136,"articleSection":139,"keywords":140},"https:\u002F\u002Fschema.org","TechArticle",{"@type":125,"name":126,"url":127},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":125,"name":126,"url":127,"logo":129},{"@type":130,"url":131},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":133,"name":6,"description":134,"additionalType":135},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":137,"@id":138},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-26567","Cybersecurity","CVE-2023-26567, CVE-2023-26567 vulnerability, CVE-2023-26567 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[142],{"Operator":26,"Negate":26,"Nodes":143},[144],{"Operator":145,"Negate":26,"CPEMatch":146},"OR",[147,149,151,153,155,157,159,161,163,165,167,169,171,173],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":148,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7F799892-BFCA-4184-BF34-4D316A7B5304",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":150,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DCC57541-8B9A-4F7C-B5AD-BABDE74D987B",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CDB0599D-399C-4B25-AC8D-F0DFD9F960C9",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2CC01C41-5999-48DF-BA27-EB08793F9C62",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":156,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1A62509A-E706-4AAE-980A-538A95FAEFFD",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":158,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"44020ABA-8123-4E39-95CD-99C96DA76630",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":160,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"59E7AB2A-F42F-495B-9786-63157F8FFD39",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":162,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6A022DFF-AFB0-4BC9-9995-C0732D4A53D3",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":164,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F34D4BBD-FCE8-41C3-8E72-4FB06AE93D6C",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":166,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"938CB1A3-B087-4B13-8017-FB20EA66E25E",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":168,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5091CC73-0948-4F66-A95F-08B2D806706E",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":170,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"938FF93C-F1D1-46AC-8EBE-4EAF9B3266FD",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":172,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AAFC050D-EEFD-4DD2-BCF3-A5209BD07A8F",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":174,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B3D1EA05-C694-421E-BD19-9FEA00731998",[],[],{"lastModified":11,"cacheTime":178,"version":179},1792447769742,"2.0",{"score":181,"band":182,"action":183,"scoredAt":184},46,"Medium","Plan remediation","2026-10-16T06:57:52.092564+00:00"]