Lucene search

[email protected]CVE-2022-4858

HistoryDec 30, 2022 - 12:15 p.m.

CVE-2022-4858

2022-12-3012:15:09

CWE-532

[email protected]

web.nvd.nist.gov

cve-2022-4858

information security

log files

m-files server

sensitive information

configuration vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.8%

JSON

Insertion of Sensitive Information into Log Files in M-Files Server before 22.10.11846.0 could allow to obtain sensitive tokens from logs, if specific configurations were set.

Affected configurations

NVD

Node

m-filesm-files_serverRange<22.10.11846.0

CPENameOperatorVersion
m-files:m-files_serverm-files m-files serverlt22.10.11846.0

CPE	Name	Operator	Version
m-files:m-files_server	m-files m-files server	lt	22.10.11846.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "M-Files Server",
    "vendor": "M-Files",
    "versions": [
      {
        "lessThan": "22.10.11846.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.m-files.com/about/trust-center/security-advisories/cve-2022-4858/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.8%

JSON

Related for CVE-2022-4858

prion1 cvelist1 nvd1