CVE-2021-45967 | BDVDB-2026-172113 Detail

Description#

An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server, exposing unintended endpoints.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.pascom.net/doc/en/release-notes/
https://www.pascom.net/doc/en/release-notes/pascom19/
https://kerbit.io/research/read/blog/4
https://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.html

Exploit#

No public exploit known

History#

Version 12022-03-18Record published in the CVE List.
Version 22024-11-20Most recent update recorded in the CVE List.