CVEvulnerability

CVE-2016-10710

8.1 HIGH Published 2018-01-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-01-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.1 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-20

Description

Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix.

Affected configurations

• biscom secure file transfer (>= 5.0.1000 <= 5.0.1048)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References