VULNERABILITY INTELLIGENCE

CVE-2022-1606

CVSS score2.4 LOW
EPSS probability0.48%
CISA KEVNot currently listed
Published2022-11-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

Description

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects.

Weakness classification

  • CWE-269: Improper Privilege Management

Primary references