Отправить #797462: Eleveo Call Recording 9.7.0 Broken Access Control

A Broken Access Control vulnerability exists in /callrec/sendlogfile endpoint of Eleveo Call Recording 9.7.0, which allows low-privileged authenticated users, including those without “Other Settings” privilege, to download system log files. The backend does not properly enforce role-based access control, allowing unauthorized users to access and download log files that should be restricted to administrative users. The accessible logs include various system and service logs such as web server logs, SIP logs, message queue logs, JTAPI logs, Genesys logs, and approximately 30 additional log files related to different system components.

Impact
Disclosure of sensitive system information contained within log files, including operational details and system component behavior.

PoC
Comprehensive reproduction steps, including supporting screenshots, are available via the shared private link. Public disclosure will occur on GitHub after the responsible disclosure period of approximately 90 days has elapsed.

Note
Contact with the vendor was initiated on March 10, and no response has been received as of the submission date. The provided PoC is accessible via a restricted link and is intended solely for review purposes by anyone possessing the link. I plan to reserve a CVE early, with public disclosure scheduled after 90 days from the initial contact date, at which point the advisory will be published on my GitHub repository. The information shared here is provided exclusively to the VulnDB team to ensure awareness and understanding of the vulnerability details.

• Источник: ⚠️ https://drive.google.com/file/d/1qnAoRYVrMeB4fhtLV4XFZOVrzVM3UeHx/view?usp=sharing
• Пользователь: omarelshopky (UID 85487)
• Представление: 05.04.2026 22:02 (3 месяцы назад)
• Модерация: 10.07.2026 10:47 (3 months later)
• Статус: принято
• Запись VulDB: 377444 [Eleveo Call Recording Software 9.7.0 /callrec/sendlogfile эскалация привилегий]
• Баллы: 20