PT-2018-9753 · Flexpaper+1 · Flexpaperviewer+1

Anthony Maia + 1 · Publicado 2018-04-25 · Atualizado 2025-05-30 · CVE-2018-10207

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Vaultize Enterprise File Sharing version 17.05.31

Description: An issue was discovered where an attacker can exploit missing authorization on the FlexPaperViewer SWF reader. This allows the attacker to export files that should have been restricted, via vectors involving page-by-page access to a document in SWF format.

Recommendations: For Vaultize Enterprise File Sharing version 17.05.31, consider restricting access to the FlexPaperViewer SWF reader until a patch is available. As a temporary workaround, limit page-by-page access to documents in SWF format to minimize the risk of exploitation.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2018-10207

Produtos afetados

Flexpaperviewer

Vaultize Enterprise File Sharing

Referências · 5

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-10207 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-10207 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-10207 · Aviso do Fabricante
• https://excellium-services.com/cert-xlm-advisory/cve-2018-10207 · Nota
• https://t.me/cvenotify/124165 · Publicação no Telegram