Lucene search
M-Files CorporationCVELIST:CVE-2022-4270HistoryDec 02, 2022 - 12:20 p.m.
CVE-2022-4270 Incorrect privilege assignment in M-Files Web Server
2022-12-0212:20:58
CWE-269
M-Files Corporation
www.cve.org
5
cve-2022-4270
m-files web
incorrect privilege assignment
CVSS3
2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N
AI Score
4.3
Confidence
High
EPSS
0.001
Percentile
22.8%
Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permissions accidentally.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "M-Files Web",
"vendor": "M-Files",
"versions": [
{
"lessThan": "22.5.11436.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2022-4270
2022-12-02 13:15:10
nvd
nvd
CVE-2022-4270
2022-12-02 13:15:10
prion
prion
Privilege escalation
2022-12-02 13:15:00
vulnrichment
vulnrichment
CVE-2022-4270 Incorrect privilege assignment in M-Files Web Server
2022-12-02 12:20:58
CVSS3
2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N
AI Score
4.3
Confidence
High
EPSS
0.001
Percentile
22.8%
Related for CVELIST:CVE-2022-4270