CVE-2022-4861 — Incorrect Implementation of Authentication Algorithm

CVE-2022-4861

Incorrect Implementation of Authentication Algorithm PUBLISHED

Description (CNA)

Incorrect implementation in authentication protocol in M-Files Client before 22.5.11356.0 allows high privileged user to get other users tokens to another resource.

Affected (CNA)

Vendor / product	Versions
M-Files / M-Files Client	affected 0 before 22.5.11356.0

CWE

CWE-303

References

https://www.m-files.com/about/trust-center/security-advisories/cve-2022-4861/
https://product.m-files.com/security-advisories/cve-2022-4861/
https://empower.m-files.com/security-advisories/CVE-2022-4861

ADP enrichment

CVE

No English description supplied.

https://www.m-files.com/about/trust-center/security-advisories/cve-2022-4861/

CISA-ADP

No English description supplied.

No references supplied.