CVE-2016-10710

Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote…

published January 25, 2018

CVSS
—
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01112 · 65.7th percentile
Published
2018-01-25T23:00Z
EPSS history
Timeline
  • 25 JAN 23:00Z
    Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote…
    cvelistv5