What is CVE-2018-10207?

CVE-2018-10207 is a medium-severity vulnerability in Vaultize Enterprise File Sharing, classified under Missing Authorization. CVSS score: 5.3/10. Published 2018-04-25.

How severe is CVE-2018-10207?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Vaultize Enterprise File Sharing

CVE-2018-10207

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit Missing Authorization on the FlexPaperViewer SWF reader, and export files that should have been restricted, via vectors involving page-by-page access to a document in SWF format.

Vulnerability class: Broken Access Control

EPSS: 0.011 (60.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Vaultize Enterprise_file_sharing — versions 17.05.31
N/a — versions n/a

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

cve@mitre.org (Third Party Advisory)
cve@mitre.org

Frequently asked questions

What is CVE-2018-10207?: CVE-2018-10207 is a medium-severity vulnerability in Vaultize Enterprise File Sharing, classified under Missing Authorization. CVSS score: 5.3/10. Published 2018-04-25.
How severe is CVE-2018-10207?: Medium severity. CVSS v3 base score is 5.3 out of 10.