CVE-2021-45967 — AI Deep Analysis Summary

🚨 **Essence**: A Path Traversal vulnerability in Pascom Cloud Phone System.…

🛠️ **Root Cause**: Configuration error between the **Nginx** reverse proxy and the **Tomcat** backend server. ⚠️ **Flaw**: Improper handling of file paths allows traversal outside intended directories.

🎯 **Affected**: **Pascom Cloud Phone System**. 📅 **Versions**: All versions **before 7.20.x**. 📦 **Components**: Nginx + Tomcat stack.

💀 **Attacker Actions**: Access non-public endpoints. 📂 **Data Impact**: Potential exposure of internal server files and system information. 🕵️ **Privileges**: Can bypass intended access controls via path manipulation.

⚖️ **Threshold**: Likely **Low to Medium**. 🔓 **Auth**: May not require authentication if the path traversal leads to public-facing misconfigured resources. ⚙️ **Config**: Relies on the specific Nginx/Tomcat setup.

🔓 **Public Exp?**: **Yes**. 📜 **PoC**: Available via ProjectDiscovery Nuclei templates. 🌐 **Wild Exp**: Referenced in security blogs (TutorialBoy24, Kerbit).

🔍 **Self-Check**: Use **Nuclei** with the specific CVE-2021-45967 template. 🧪 **Scan**: Look for path traversal responses in the Pascom application endpoints. 📋 **Verify**: Check if Tomcat files are accessible via Nginx.

✅ **Fixed**: **Yes**. 🔄 **Patch**: Upgrade to **Pascom Cloud Phone System 7.20.x** or later. 📝 **Source**: Official release notes confirm the fix.

🛡️ **No Patch?**: Restrict Nginx configuration to prevent path traversal. 🚫 **Mitigation**: Ensure strict mapping between Nginx and Tomcat. 🔒 **Network**: Block external access to internal Tomcat ports if possible.

🔥 **Urgency**: **High**. ⏳ **Priority**: Immediate patching recommended. 🚨 **Reason**: Public PoC exists, and it affects cloud phone systems handling sensitive comms.