CVE-2024-57249: Gleamtech Filevista

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Incorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote attackers to gain unauthorized access via exploiting a vulnerability in access control mechanisms by removing authentication-related HTTP headers, such as the Cookie header, in the request. This bypasses the authentication process and grants attackers access to sensitive image files without proper login credentials.

Affected products

• Gleamtech Filevista: version 9.2.0 only

Published 2025-02-07. Last modified 2026-06-17.