PT-2022-14218 · Filecloud · Filecloud

Andrea Hauser + 1 · Published 2022-06-15 · Updated 2024-05-17 · CVE-2022-1958

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FileCloud versions prior to 21.3.5.18513

Description A critical vulnerability has been found in FileCloud, affecting the NTFS handler, which leads to improper access controls. The issue can be exploited remotely, but it requires some form of authentication.

Recommendations For versions prior to 21.3.5.18513, upgrade to version 21.3.5.18513 to address this issue. As a temporary workaround, consider restricting access to the NTFS handler until the upgrade is applied.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-1958

Affected Products

Filecloud

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2022-1958 · Security Note
• https://filecloud.com/supportdocs/fcdoc/2v/server/security-advisories/2022-security-advisories/advisory-2022-06-01-potential-unauthorized-data-access-when-using-network-folders-with-ntfs-permissions · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-1958 · Vendor Advisory
• https://scip.ch/?news.20220615 · Note
• https://t.me/cvenotify/31635 · Telegram Post
• https://t.me/cvenotify/31637 · Telegram Post
• https://t.me/cvenotify/32055 · Telegram Post
• https://vuldb.com/?id.201960 · Note
• https://vuldb.com/?ctiid.201960 · Note
• https://t.me/cibsecurity/44477 · Telegram Post