high7.5

CVE-2018-13789

An issue was discovered in Descor Infocad FM before 3.1.0.0.

Impact

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.

Affected products

Vendor	Product	Affected versions
Descor	Infocad Fm	before 3.1.0.0

Weakness classification

CWE-287 CWE-294 CWE-522

References

NVD record
CVE.org record
https://www.quantumleap.it/infocad-facility-management-cve-2018-13789-unauthenticated-webservice-allows-retrieval-arbitrary-files/
https://www.quantumleap.it/infocad-facility-management-cve-2018-13789-unauthenticated-webservice-allows-retrieval-arbitrary-files/