Lucene search
+L

335 matches found

Vulnrichment
Vulnrichment
•added 2022/12/30 11:24 a.m.•23 views

CVE-2022-4858 Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log Files in M-Files Server before 22.10.11846.0 could allow to obtain sensitive tokens from logs, if specific configurations were set...

4.4CVSS6.7AI score0.00468EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/30 11:24 a.m.•33 views

CVE-2022-4858 Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log Files in M-Files Server before 22.10.11846.0 could allow to obtain sensitive tokens from logs, if specific configurations were set...

4.4CVSS7.6AI score0.00468EPSS
SaveExploits0References3
CVE
CVE
•added 2022/12/30 11:24 a.m.•94 views

CVE-2022-4858

CVE-2022-4858 affects M-Files Server versions prior to 22.10.11846.0. The vulnerability allows insertion of sensitive information into log files, which could enable extraction of sensitive tokens from logs when certain configurations are set. The provided documents indicate remediation by upgradi...

7.5CVSS5.4AI score0.00468EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/30 12:00 a.m.•28 views

PT-2022-28144

Name of the Vulnerable Software and Affected Versions M-Files Server versions prior to 22.10.11846.0 Description The issue allows sensitive information to be inserted into log files, potentially enabling the obtainment of sensitive tokens from logs if specific configurations are set...

7.5CVSS7.2AI score0.00468EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2022/12/30 12:00 a.m.•13 views

M-Files Server 日志信息泄露漏洞

M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in versions prior to M-Files Server 22.10.11846.0 that stems from a vulnerability that could allow sensitive tokens to be obtained from logs if certain configurations are set...

7.5CVSS7.3AI score0.00468EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/30 12:00 a.m.•2 views

CVE-2022-4858: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log Files in M-Files Server before 22.10.11846.0 could allow to obtain sensitive tokens from logs, if specific configurations were set...

7.5CVSS5.8AI score0.00468EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/30 12:00 a.m.•37 views

PT-2022-28147

Name of the Vulnerable Software and Affected Versions M-Files Client versions prior to 22.5.11356.0 M-Files Server versions prior to 22.5.11356.0 Description The issue is related to an incorrect implementation in the authentication protocol, allowing a high-privileged user to obtain other users'...

4.9CVSS5.3AI score0.00548EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2022/11/30 3:15 p.m.•10 views

CVE-2022-1606

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

4.3CVSS5AI score0.00485EPSS
SaveExploits0References4
OSV
OSV
•added 2022/11/30 3:15 p.m.•18 views

CVE-2022-1606

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

4.3CVSS5.8AI score0.00485EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/11/30 3:15 p.m.•9 views

CVE-2022-1911

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

5.3CVSS5.7AI score0.00619EPSS
SaveExploits0References4
OSV
OSV
•added 2022/11/30 3:15 p.m.•20 views

CVE-2022-1911

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

5.3CVSS5.8AI score0.00619EPSS
SaveExploits0References3
NVD
NVD
•added 2022/11/30 3:15 p.m.•37 views

CVE-2022-1606

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

4.3CVSS0.00485EPSS
SaveExploits0References3
Prion
Prion
•added 2022/11/30 3:15 p.m.•30 views

Design/Logic Flaw

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

4CVSS4.7AI score0.00485EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/11/30 3:15 p.m.•43 views

Information disclosure

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

5CVSS5.2AI score0.00619EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/11/30 2:35 p.m.•34 views

CVE-2022-1911 Information disclosure in M-Files Server

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

5.3CVSS5.5AI score0.00619EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/11/30 2:35 p.m.•22 views

CVE-2022-1911 Information disclosure in M-Files Server

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

5.3CVSS6.7AI score0.00619EPSS
SaveExploits0References3
CVE
CVE
•added 2022/11/30 2:35 p.m.•96 views

CVE-2022-1911

CVE-2022-1911 affects M-Files Server. The root cause is an error in a parser function that allows unauthenticated access to some information of the underlying operating system. Affected versions are before 22.6.11534.1 and before 22.6.11505.0. The CVSS 3.1 vector indicates Network access, no priv...

5.3CVSS5.2AI score0.00619EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2022/11/30 2:05 p.m.•76 views

CVE-2022-1606

M-Files Server is affected by CVE-2022-1606 due to incorrect privilege assignment that allows a user to read unmanaged objects. Affected versions are pre-22.3.11164.0 and pre-22.3.11237.1. The vulnerability stems from privilege handling in the server, enabling unintended access to objects not pro...

4.3CVSS4AI score0.00485EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/30 2:05 p.m.•27 views

CVE-2022-1606 Incorrect privilege assignment in M-Files Server

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

2.4CVSS6.8AI score0.00485EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/11/30 2:05 p.m.•40 views

CVE-2022-1606 Incorrect privilege assignment in M-Files Server

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

2.4CVSS4.9AI score0.00485EPSS
SaveExploits0References3
Rows per page
Query Builder