Lucene search

K
cvelistMitreCVELIST:CVE-2016-10710
HistoryJan 25, 2018 - 11:00 p.m.

CVE-2016-10710

2018-01-2523:00:00
mitre
www.cve.org
2
biscom secure file transfer
datafieldid
sequential numbers
authenticated users
overwrite files
read files
crafted requests
version 5.0.1050

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

55.7%

Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix.

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

55.7%

Related for CVELIST:CVE-2016-10710