CVE-2015-7675 The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in...
MediumCVSS 6.5
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileIds parameter to mobile/sendMsg or (2) arg01 parameter to human.aspx.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch moveit dmz | <= 8.1 | No fix listed |
| ipswitch moveit mobile | <= 1.2.0.962 | No fix listed |
References
- docs.ipswitch.com vendor-advisory
- packetstormsecurity.com exploit
- 20160127 Multiple security issues in MOVEit Managed File Transfer application mailing-list
- www.profundis-labs.com exploit