| 标题 | Eleveo Call Recording Software 9.7.0 LDAP Injection |
|---|
| 描述 | Multiple LDAP Injection vulnerabilities in Eleveo Call Recording 9.7.0 allow authenticated users to enumerate directory via the username parameter of /callrec/userAddAction.do and /callrec/userEditAction.do endpoints. By supplying specially crafted input in the username parameter, users can modify the underlying LDAP filter, causing the system to return directory entries that should otherwise be restricted. This can allow enumeration of users and retrieval of sensitive directory information.
Impact
• Disclosure of directory users, including usernames and potentially other associated attributes.
• Unauthorized enumeration of LDAP entries, bypassing intended access controls.
PoC
Comprehensive reproduction steps, including supporting screenshots, are available via the shared private link. Public disclosure will occur on GitHub after the responsible disclosure period of approximately 90 days has elapsed.
Note
Contact with the vendor was initiated on March 10, and no response has been received as of the submission date. The provided PoC is accessible via a restricted link and is intended solely for review purposes by anyone possessing the link. I plan to reserve a CVE early, with public disclosure scheduled after 90 days from the initial contact date, at which point the advisory will be published on my GitHub repository. The information shared here is provided exclusively to the VulnDB team to ensure awareness and understanding of the vulnerability details. |
|---|
| 来源 | ⚠️ https://drive.google.com/file/d/1DZ44Uq3fy7pQYcKwWB4A2gYGFYn1dZSo/view?usp=sharing |
|---|
| 用户 | omarelshopky (UID 85487) |
|---|
| 提交 | 2026-07-18 15時06分 (2 月前) |
|---|
| 管理 | 2026-09-28 10時11分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 410997 [Eleveo Call Recording Software 9.7.0 User Management userAddAction.do 用户名 权限提升] |
|---|
| 积分 | 20 |
|---|