[asterisk-bugs] [JIRA] (ASTERISK-24534) [patch]Register DB() as escalating to prevent users from writing to astdb

[Matt Jordan (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-24534?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Matt Jordan updated ASTERISK-24534:
-----------------------------------

    Security:     (was: Reporter, Bug Marshals, and Digium)

> [patch]Register DB() as escalating to prevent users from writing to astdb
> -------------------------------------------------------------------------
>
>                 Key: ASTERISK-24534
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24534
>             Project: Asterisk
>          Issue Type: Bug
>          Components: Functions/func_db
>    Affects Versions: 1.8.32.0, 11.14.0, 12.7.0, 13.0.0
>            Reporter: Gareth Palmer
>            Assignee: Kevin Harwell
>            Severity: Critical
>      Target Release: 1.8.32.1, 11.14.1, 12.7.1, 13.0.1
>
>         Attachments: func_db-428167.patch
>
>
> This patch registers DB() as escalating to prevent users reading and writing to the astdb via AMI or ARI.



--
This message was sent by Atlassian JIRA
(v6.2#6252)