PT-2020-16745

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer SFT versions 5.1.0 through 5.1.1081 Biscom Secure File Transfer SFT versions 6.0.0 through 6.0.1010 Description The issue allows user credential theft. Recommendations For versions 5.1.0 through 5.1.1081, update to...

CVE-2020-27646: Undefined Security Weakness

Biscom Secure File Transfer SFT before 5.1.1082 and 6.x before 6.0.1011 allows user credential theft...

PT-2020-20285

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer SFT versions prior to 5.1.1071 Biscom Secure File Transfer SFT versions 6.0.1xxx prior to 6.0.1005 Description The issue allows Remote Code Execution on the server. Recommendations For versions prior to 5.1.1071,...

CVE-2020-8796: Undefined Security Weakness

Biscom Secure File Transfer SFT before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code Execution on the server...

PT-2020-20180

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer SFT versions 5.0.1050 through 5.1.1067 Biscom Secure File Transfer SFT versions 6.0.1000 through 6.0.1003 Description The issue allows Insecure Direct Object Reference IDOR by an authenticated sender due to an error...

CVE-2020-8503: Authorization Bypass Through User-Controlled Key

Biscom Secure File Transfer SFT 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference IDOR by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004...

PT-2018-4881

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer SFT versions 5.0.1000 through 5.0.1048 Description The issue allows remote authenticated users to overwrite or read files via crafted requests due to the lack of validation of the dataFieldId value. This is possible...

CVE-2016-10710: Improper Input Validation

Biscom Secure File Transfer SFT 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix...