FileCloud security vulnerabilities

FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. offering industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. A security vulnerability exists in FileCloud version v23.241.2, whic...

CVE-2022-39833

FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request...

CVE-2022-39833

FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request...

Remote code execution

FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request...

CVE-2022-39833: Improper Control of Generation of Code

FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request...

FileCloud security vulnerabilities

FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. offering industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. A security vulnerability exists in FileCloud version 20.2 and later...

PT-2022-25024

Name of the Vulnerable Software and Affected Versions FileCloud versions 20.2 and later Description The issue allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request. Recommendations For FileCloud versions 20....

CVE-2022-39833

CVE-2022-39833 affects FileCloud versions 20.2 and later. The vulnerability allows remote attackers to execute arbitrary code and access API endpoints through a crafted HTTP request. The issue is described as a remote code execution risk with network access and no user interaction, with a high im...

CVE-2022-39833

FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request...

CVE-2022-39833

FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request...

CVE-2022-1958

A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It ...

CVE-2022-1958

A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It ...

CVE-2022-1958

A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It ...

Improper access control

A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It ...

CVE-2022-1958 FileCloud NTFS access control

A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It ...

CVE-2022-1958

CVE-2022-1958 affects FileCloud via the NTFS Handler, where an unknown function leads to improper access controls. The vulnerability can be exploited remotely and requires no user interaction. Upgrading to FileCloud 21.3.5.18513 mitigates the issue (addressed by VDB-201960). References indicate m...

CVE-2022-1958: Improper Access Control

A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It ...

FileCloud Access Control Vulnerability

FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. providing industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. An access control error vulnerability exists in FileCloud version...

PT-2022-14218 · Filecloud · Filecloud

Name of the Vulnerable Software and Affected Versions: FileCloud versions prior to 21.3.5.18513 Description: A critical vulnerability has been found in FileCloud, affecting the NTFS handler, which leads to improper access controls. The issue can be exploited remotely, but it requires some form of...

CVE-2022-24633

All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/". A malicious actor could identify the existence of users by requesting share information on specified share paths...