PT-2020-16745 · Biscom · Biscom Secure File Transfer

Published 2020-10-22 · Updated 2021-07-21 · CVE-2020-27646

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer (SFT) versions 5.1.0 through 5.1.1081 Biscom Secure File Transfer (SFT) versions 6.0.0 through 6.0.1010

Description The issue allows user credential theft.

Recommendations For versions 5.1.0 through 5.1.1081, update to version 5.1.1082 or later. For versions 6.0.0 through 6.0.1010, update to version 6.0.1011 or later.

Fix

Related Identifiers

CVE-2020-27646

Affected Products

Biscom Secure File Transfer

References · 4

• https://cve.biscom.com/bis-sft-cv-0011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27646 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27646 · Vendor Advisory
• https://t.me/cibsecurity/15524 · Telegram Post