An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. Enumeration of users is possible through the password-reset feature.
References
Link | Resource |
---|---|
https://www.excellium-services.com/cert-xlm-advisory/cve-2018-10210/ | Third Party Advisory |
Configurations
Information
Published : 2018-04-25 11:29
Updated : 2018-05-25 05:08
NVD link : CVE-2018-10210
Mitre link : CVE-2018-10210
JSON object : View
CWE
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
Products Affected
vaultize
- enterprise_file_sharing