CVE-2021-37452

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published
Jul 25, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-374535.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).CVE-2021-374545.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).CVE-2021-374555.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).CVE-2021-374565.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).CVE-2021-374575.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).CVE-2021-374585.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).CVE-2021-374595.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).CVE-2021-37466.5A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by speciaCVE-2021-374605.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).CVE-2021-374615.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).CVE-2021-374625.4Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).CVE-2021-374635.4In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).
CVE-2021-37452: Medium severity, CVSS 5.5 | Vulnix