CVEvulnerability

CVE-2018-10207

5.3 MEDIUM Published 2018-04-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-862

Description

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit Missing Authorization on the FlexPaperViewer SWF reader, and export files that should have been restricted, via vectors involving page-by-page access to a document in SWF format.

Affected configurations

• vaultize enterprise file sharing 17.05.31

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References