NCH IVM Attendant Directory Traversal Vulnerability

NCH IVM Attendant is a complete voicemail, call attendant, and IVR solution for Windows.A security vulnerability in NCH IVM Attendant allows an authenticated attacker to exploit a user’s access to a directory via viewfile?file=/… using directory traversal.