Authentication flaw

2022-12-3014:15:00

PRIOn knowledge base

www.prio-n.com

authentication protocol

implementation

privileged user

user tokens

resource access

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

JSON

Incorrect implementation in authentication protocol in M-Files Client before 22.5.11356.0 allows high privileged user to get other users tokens to another resource.

CPENameOperatorVersion
m-files_clientlt22.5.11356.0

CPE	Name	Operator	Version
	m-files_client	lt	22.5.11356.0

References

www.m-files.com/about/trust-center/security-advisories/cve-2022-4861/