Uploaded image for project: 'FreePBX'
  1. FreePBX
  2. FREEPBX-1965

Security on Asterisk Logs Module

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Resolution: Not an issue
    • Affects Version/s: 2.3
    • Fix Version/s: None
    • Component/s: None
    • Asterisk Version:
      1.2.18

      Description

      When using DB authentication in FrePBX 2.2.1 (installed with Trixbox 2.2) the URL https://server.name.com/admin/modules/logfiles/asterisk-full-log.php can be used to view the Asterisk log without logging into FreePBX (bypassing the FreePBX DB security).

      This is probably related to Bug FREEPBX-1481

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                davidmiller davidmiller
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  NextupJiraPlusStatus

                  Error rendering 'slack.nextup.jira:nextup-jira-plus-status'. Please contact your Jira administrators.