CVE-2015-7677

The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote…

published February 10, 2016

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumerate FileIDs via the X-siLock-FileID parameter in a download action to MOVEitISAPI/MOVEitISAPI.dll.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02954 · 87.1th percentile
Published
2016-02-10T15:00Z
EPSS history
Timeline
  • 10 FEB 15:00Z
    The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote…
    cvelistv5