Debian/asterisk: unknown
The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data
Action: Upgrade asterisk to 1:1.6.2.0~rc3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:1.6.2.0~rc3-1 | - |
Fixed versions
| 1:1.6.2.0~rc3-1 |
Sources
published · modified · JSON