CVE-2015-7675

The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and…

published February 10, 2016

CVSS
—
EPSS
3%
Percentile
87.6
In the wild
Unconfirmed
What it is

The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileIds parameter to mobile/sendMsg or (2) arg01 parameter to human.aspx.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03111 · 87.6th percentile
Published
2016-02-10T15:00Z
EPSS history
Timeline
  • 10 FEB 15:00Z
    The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and…
    cvelistv5