CVE-2017-5241

概要

参考情報

• securityfocus.com/bid/99341 · Third Party Advisory
• community.rapid7.com/community/infosec/blog/2017/06/27/r7-2017-06-biscom-sftp-xss-cve-2017-5241 · Exploit
• cve.biscom.com/bis-sft-cv-003

secure file transfer のその他の脆弱性

• CVE-2020-27646中 6.5Biscom Secure File Transfer (SFT) before 5.1.1082 and 6.x before 6.0.1011 allows user credential theft.
• CVE-2020-8796緊急 9.8Biscom Secure File Transfer (SFT) before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code Execution on the server.
• CVE-2020-8503中 6.5Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by …
• CVE-2016-10710高 8.1Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allo…