CVE-2022-4861

Medium

Incorrect implementation in authentication protocol in M-Files Client before 22.5.11356.0 allows high privileged user to get other users…

M-Files Corporation·CWE-303·Published 2022-12-30

CVSS

4.9

EPSS

0.01

KEV

Exploits

cve.orgen

164 chars

Incorrect implementation in authentication protocol in M-Files Client before 22.5.11356.0 allows high privileged user to get other users tokens to another resource.

NVDen

164 chars

Incorrect implementation in authentication protocol in M-Files Client before 22.5.11356.0 allows high privileged user to get other users tokens to another resource.

NVDes

196 chars

La implementación incorrecta en el protocolo de autenticación en M-Files Client anterior a 22.5.11356.0 permite a usuarios con altos privilegios obtener tokens de otros usuarios para otro recurso.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
3.1	Primary	cve.org	4.8	—	—	CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N