Lucene search

K
vulnrichmentM-Files CorporationVULNRICHMENT:CVE-2022-4270
HistoryDec 02, 2022 - 12:20 p.m.

CVE-2022-4270 Incorrect privilege assignment in M-Files Web Server

2022-12-0212:20:58
CWE-269
M-Files Corporation
github.com
4
incorrect privilege
m-files web
cve-2022-4270
permission issue

CVSS3

2

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N

AI Score

7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Incorrect privilege assignment issue in M-Files Web in M-Files Web versions beforeΒ 22.5.11436.1 could have changed permissions accidentally.

CVSS3

2

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N

AI Score

7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2022-4270