CVE-2021-37445: Improper Limitation of a Pathname to a Restricted Directory

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...

NCH WebDictate path traversal vulnerability

A security vulnerability exists in NCH WebDictate, a web-based dictation recording, editing and management software, which stems from the product's logprop?file=/... path fails to filter incoming special characters, which can be exploited to read critical files...

PT-2021-21684

Name of the Vulnerable Software and Affected Versions NCH WebDictate versions 2.13 and earlier Description The issue allows authenticated users to exploit a path traversal vulnerability using the logprop?file=/.. parameter to read files on the filesystem. Recommendations For NCH WebDictate versio...

CVE-2021-37440: Improper Limitation of a Pathname to a Restricted Directory

NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring...

PT-2021-21658

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue allows an authenticated user to perform directory traversal, enabling file reading. This is achieved via the "logprop?file=/.." endpoint. Recommendations For NCH Quorum versions 2.03 a...

CVE-2021-37469: Improper Limitation of a Pathname to a Restricted Directory

In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem...