CVE-2018-10211

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "vaultize_session_id" value in a cookie.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2018-04-25

Last modified

2025-05-30

Weaknesses

CWE-639

Affected products

• Enterprise File Sharing (Vaultize)

References

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-10211
• https://www.excellium-services.com/cert-xlm-advisory/cve-2018-10211/