← Database

CVE-2022-4861

MEDIUM CVSS: 4.8 Published: 2022-12-30 Modified: 2026-06-17

Description

Incorrect implementation in authentication protocol in M-Files Client before 22.5.11356.0 allows high privileged user to get other users tokens to another resource.

Affected Platforms

M-Files M-Files Client

Weakness Type

CWE-303, CWE-287

References