{"cvss":0.0,"datePublished":"2011-10-18T00:00:00Z","dateUpdated":"2011-10-18T00:00:00Z","description":"htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ari_auth cookie, related to the PHP unserialize function, as exploited in the wild in September 2014.","dueDate":"","id":"CVE-2014-7235","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"FreePBX","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"freepbx FreePBX Improper Control of Generation of Code","vendor":"freepbx"}