CVE:CVE-2021-45967
CNNVD:CNNVD-202203-1794
Pascom Cloud Phone System是Pascom的一个云电话系统。用于为企业和个人提供集成通信解决方案。
 Pascom Cloud Phone System 7.20.x之前版本存在路径遍历漏洞，该漏洞源于nginx和后端服务器Tomcat之前的配置错误会导致Tomcat服务器中的路径遍历，从而暴露非预期的端点。
solution:Upgrade pascom_cloud_phone_system * to a higher version than 7.19,and avoid the version (,7.19]; Upgrade igniterealtime openfire to a higher version than 4.5.0,4.5.0,and avoid the version (,4.5.0),4.5.0