Lucene search
HistoryDec 30, 2022 - 2:15 p.m.
CVE-2022-4861
authentication protocol
m-files client
high privileged user
tokens
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
34.0%
Incorrect implementation in authentication protocol in M-Files Client before 22.5.11356.0 allows high privileged user to get other users tokens to another resource.
Affected configurations
Node
m-filesm-files_clientRange<22.5.11356.0
Related
prion
prion
Authentication flaw
2022-12-30 14:15:00
cve
cve
CVE-2022-4861
2022-12-30 14:15:08
cvelist
cvelist
CVE-2022-4861 Incorrect Implementation of Authentication Algorithm
2022-12-30 13:31:21
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
34.0%
Related for NVD:CVE-2022-4861