Security Advisory
CVE-2015-7675
6.5
MEDIUM
Vulnerability Description
The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileIds parameter to mobile/sendMsg or (2) arg01 parameter to human.aspx.
Published Date
February 10, 2016
Official Source
NIST NVD Advisory