| Summary: | ASTERISK-24534: [patch]Register DB() as escalating to prevent users from writing to astdb | ||||
| Reporter: | Gareth Palmer (gareth) | Labels: | |||
| Date Opened: | 2014-11-17 20:38:56.000-0600 | Date Closed: | 2014-11-20 10:58:06.000-0600 | ||
| Priority: | Critical | Regression? | |||
| Status: | Closed/Complete | Components: | Functions/func_db | ||
| Versions: | 1.8.32.0 11.14.0 12.7.0 13.0.0 | Frequency of Occurrence | Constant | ||
| Related Issues: |
| ||||
| Environment: | Attachments: | ( 0) func_db-428167.patch | |||
| Description: | This patch registers DB() as escalating to prevent users reading and writing to the astdb via AMI or ARI. | ||||
| Comments: | By: Matt Jordan (mjordan) 2014-11-17 20:59:58.915-0600 Please, please, *please* lock down issues before creating them. Issues created by default are e-mailed out to the mailing lists, which publishes problems to {{asterisk-bugs}}. Locking them down to Digium, Bug Marshals, and Issue Reporter prevents inadvertent disclosures. Yes, DB should probably be registered as escalating. | ||||