CVE-2018-10207

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit Missing Authorization on the FlexPaperViewer SWF reader, and export files that should have been restricted, via vectors involving page-by-page access to a document in SWF format.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2018-04-25

Last modified

2025-05-30

Weaknesses

CWE-862

Affected products

• Enterprise File Sharing (Vaultize)

References

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-10207
• https://www.excellium-services.com/cert-xlm-advisory/cve-2018-10207/