Описание
An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "vaultize_session_id" value in a cookie.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:vaultize:enterprise_file_sharing:17.05.31:*:*:*:*:*:*:*
EPSS
Процентиль: 43%
0.00206
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-639
Связанные уязвимости
CVSS3: 5.3
github
больше 3 лет назад
An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "vaultize_session_id" value in a cookie.
EPSS
Процентиль: 43%
0.00206
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-639