CVE-2015-7675 in MOVEit DMZ
Zusammenfassung
von MITRE
The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileIds parameter to mobile/sendMsg or (2) arg01 parameter to human.aspx.
VulDB is the best source for vulnerability data and more expert information about this specific topic.