CVE Feed

    Dashboard / CVE / CVE-2020-8503

    CVE-2020-8503

    Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004.

    Published:Jan 31, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 31, 2020
    EPSS Score:0.00267
    CVSS Score:6.5

    Affected Products

    Vendor
    Biscom
    Product
    Secure File Transfer

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2020-27646 (CVSS 6.5) — Biscom Secure File Transfer (SFT) before 5.1.1082 and 6.x before 6.0.1011 allows user credential theft.…
    CVE-2020-8796 (CVSS 9.8) — Biscom Secure File Transfer (SFT) before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code Execution on…
    CVE-2016-10710 (CVSS 8.1) — Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses …
    CVE-2017-5247 (CVSS 5.4) — Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated use…
    CVE-2017-5246 (CVSS 4.3) — Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An auth…
    CVE-2017-5241 (CVSS 5.4) — Biscom Secure File Transfer versions 5.0.0.0 trough 5.1.1024 are vulnerable to post-authentication persistent …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High