CVEvulnerability

CVE-2018-13789

7.5 HIGH Published 2018-10-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-287, CWE-294, CWE-522

Description

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.

Affected configurations

• descor infocad fm (< 3.1.0.0)

Related

Weakness · CWE (3)

  • CWE-287 Improper Authentication weakness
  • CWE-294 Authentication Bypass by Capture-replay weakness
  • CWE-522 Insufficiently Protected Credentials weakness

References