An issue exists in Pascom Cloud Phone System prior to 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server, exposing unintended endpoints.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
pascom cloud phone system |
||
igniterealtime openfire |
||
igniterealtime openfire 4.5.0 |