CVE-2022-4270

CVE-2022-4270 describes an Incorrect privilege assignment issue in M-Files Web. Affected: M-Files Web versions prior to 22.5.11436.1 (including Web Classic and Web Next). Root cause: a misconfiguration could cause permissions to be changed accidentally when handling ACLs, potentially impacting ac...

M-Files Web 安全漏洞

M-Files Web is an intelligent information management platform from M-Files USA, Inc. It is used to optimally support users in their daily work. A security vulnerability exists in M-Files Web Classic prior to 22.5.11436.1, M-Files Web vNext prior to 22.5.11436.1, which originates from a user with...

PT-2022-26509

Name of the Vulnerable Software and Affected Versions M-Files Web versions before 22.5.11436.1 Description The issue is related to an incorrect privilege assignment in M-Files Web, which could have resulted in accidental changes to permissions. Recommendations For M-Files Web versions before...

CVE-2022-1606

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

CVE-2022-1911

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

CVE-2022-1606

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

CVE-2022-1606

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

CVE-2022-1911

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

Information disclosure

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

Design/Logic Flaw

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

CVE-2022-1911 Information disclosure in M-Files Server

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

CVE-2022-1911 Information disclosure in M-Files Server

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

CVE-2022-1911

CVE-2022-1911 affects M-Files Server. The root cause is an error in a parser function that allows unauthenticated access to some information of the underlying operating system. Affected versions are before 22.6.11534.1 and before 22.6.11505.0. The CVSS 3.1 vector indicates Network access, no priv...

CVE-2022-1606 Incorrect privilege assignment in M-Files Server

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

CVE-2022-1606

M-Files Server is affected by CVE-2022-1606 due to incorrect privilege assignment that allows a user to read unmanaged objects. Affected versions are pre-22.3.11164.0 and pre-22.3.11237.1. The vulnerability stems from privilege handling in the server, enabling unintended access to objects not pro...

CVE-2022-1606 Incorrect privilege assignment in M-Files Server

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...

M-Files Server 安全漏洞

M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in M-Files Server versions prior to 22.6.11534.1, prior to 22.6.11505.0, which stems from an error in a parser function. An attacker could exploit the vulnerability to access certain information i...

M-Files Server 安全漏洞

M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in M-Files Server versions prior to 22.3.11164.0, 22.3.11237.1 and prior to 22.3.11237.1, which stems from incorrect privilege assignment. An attacker could exploit the vulnerability to read...

Command Execution Vulnerability in Golden Power Grid's Trusted O&M Management System

Golden Grid AnTrust O&M Management System provides a professional "human-machine" interactive O&M platform and professional "human-machine" delivery solutions. There is a command execution vulnerability in the Golden Grid Secure O&M Management System, which can be exploited by attackers to execut...

PT-2022-14188

Name of the Vulnerable Software and Affected Versions M-Files Server versions before 22.6.11534.1 M-Files Server versions before 22.6.11505.0 Description The issue is related to an error in a parser function that allowed unauthenticated access to some information of the underlying operating syste...