Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.6
CVE-2022-4270: Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permissions accidentally.
CVE-2022-4270 · published 3 years ago
Summary
Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permissions accidentally.
What to do
- Update m-files m-files_server to version 22.5.11436.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| m-files | m-files_server |
< 22.5.11436.1 cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:* |
Original advisory text
Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permissions accidentally.
Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permissions accidentally.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-269Improper Privilege Management
Timeline
Published2 Dec 2022
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-4270 · NVD
Track software like this
Free during beta