1. Home
  2. CVE Database
  3. CVE-2020-8503
MEDIUM · 6.5

CVE-2020-8503

Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-upload...

Vulnerability Description

Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
BiscomSecure File Transfer>= 5.0.1050, <= 5.1.1067

Related Weaknesses (CWE)

CWE-639

References

FAQ

What is CVE-2020-8503?

CVE-2020-8503 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-upload...

How severe is CVE-2020-8503?

CVE-2020-8503 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8503?

Check the references section above for vendor advisories and patch information. Affected products include: Biscom Secure File Transfer.