Two vulnerabilities was found in the ARI package included in the asterisk@home Distribution versions 0.7.15 and lower. These vulnerabilities allow a user to listen to voicemail from any other users and and to disclose configuration password.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45881/astathome.txt
Source: https://packetstormsecurity.com/files/45881/astathome.txt.html