CVE-2021-37440

NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring...

NCH WebDictate Directory Traversal Vulnerability

A security vulnerability exists in NCH WebDictate, a web-based dictation recording, editing and management software, which stems from the product's logprop?file=/... path fails to filter incoming special characters, which can be exploited to read critical files...

Path traversal

NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring...

CVE-2021-37445

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...

CVE-2021-37440

NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring...

PT-2021-21653

Name of the Vulnerable Software and Affected Versions NCH Axon PBX versions 2.22 and earlier Description The issue allows path traversal for file disclosure via the logprop?file=/.. substring. This enables unauthorized access to files on the system. Recommendations For NCH Axon PBX versions 2.22...

CVE-2021-37440: Improper Limitation of a Pathname to a Restricted Directory

NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring...

CVE-2021-37445: Improper Limitation of a Pathname to a Restricted Directory

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...

CVE-2021-37469: Improper Limitation of a Pathname to a Restricted Directory

In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem...

PT-2021-21658

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue allows an authenticated user to perform directory traversal, enabling file reading. This is achieved via the "logprop?file=/.." endpoint. Recommendations For NCH Quorum versions 2.03 a...

NCH WebDictate path traversal vulnerability

A security vulnerability exists in NCH WebDictate, a web-based dictation recording, editing and management software, which stems from the product's logprop?file=/... path fails to filter incoming special characters, which can be exploited to read critical files...

NCH Axon PBX path traversal vulnerability

NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. The NCH Axon PBX has a security vulnerability that could be exploited by an attacker to send a constructed URL request to the logprop function, which contains a "dot-dot" sequence in the file parameter /...

PT-2021-21684

Name of the Vulnerable Software and Affected Versions NCH WebDictate versions 2.13 and earlier Description The issue allows authenticated users to exploit a path traversal vulnerability using the logprop?file=/.. parameter to read files on the filesystem. Recommendations For NCH WebDictate versio...