CVE-2021-37445: Path Traversal
Published Jul 25, 2021
·Updated
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading.
Affected Software
1 affected component
Nchsoftware Quorum<=2.03
Event History
Jul 25, 2021
CVE Published
via MITRE·08:13 PM
Data Sourced
via MITRE·08:13 PM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-37445?
CVE-2021-37445 is a vulnerability in NCH Quorum v2.03 and earlier that allows an authenticated user to perform directory traversal and read arbitrary files.
2
What is the severity of CVE-2021-37445?
The severity of CVE-2021-37445 is medium with a CVSS score of 6.5.
3
How does CVE-2021-37445 affect NCH Quorum?
CVE-2021-37445 affects NCH Quorum v2.03 and earlier versions.
4
How can an authenticated user exploit CVE-2021-37445?
An authenticated user can exploit CVE-2021-37445 by using directory traversal via logprop?file=/.. for file reading.
5
Are there any references for CVE-2021-37445?
Yes, you can refer to the following links for more information on CVE-2021-37445: [Link 1](https://github.com/0xfml/poc/blob/main/NCH/Quorum_2.03_LFI.md) and [Link 2](https://www.nch.com.au/conference/index.html).