Improper Authorization in Vaultize Enterprise File Sharing 17.05.31

CVE-2018-10211 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "vaultize_session_id" value in a cookie.

Learn more about our User Device Pen Test.