CVE-2021-45967 Path traversal in n/a
A configuration error in Pascom Cloud Phone System allows path traversal, exposing unintended endpoints on the backend Tomcat server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-45967?
CVE-2021-45967 is a critical path traversal vulnerability in n/a, published on 18 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server, exposing unintended endpoints.
Weakness: CWE-22
Which versions are affected by CVE-2021-45967?
1 open source package ship an affected version, including openfire. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
openfire Bitnami | All versions to 4.5.0 | 4.5.0 |
Products include Igniterealtime Openfire, Pascom Cloud Phone System.
How do I fix CVE-2021-45967?
Upgrade openfire to 4.5.0 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2021-45967 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-45967 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in n/a
- CVE-2023-32315 Ignite Realtime Openfire Path Traversal
- CVE-2024-25421 Ignite Realtime Openfire privilege escalation vulnerability
- CVE-2019-18394 Ignite Realtime Openfire vulnerable to Server Side Request Forgery
- CVE-2014-2741 Ignite Realtime Openfire vulnerable to XMPPbomb attack
- CVE-2014-3451 Security feature bypass in n/a
Sources
Also known as BIT-openfire-2021-45967, GHSA-6669-q2h5-85q9.