CVE-2023-6239
5.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Summary
Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of metadata-driven permissions in M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7, potentially enabling unauthorized access to the object.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| M-Files | M-Files Server | 23.9 | affected |
| M-Files | M-Files Server | 23.10 | affected |
| M-Files | M-Files Server | 23.11 < 23.11.13168.7 | affected |
Weaknesses
- CWE-281: CWE-281 Improper Preservation of Permissions
ADP Enrichment
CVE Program Container
Additional References
References
- https://product.m-files.com/security-advisories/cve-2023-6239/
- https://empower.m-files.com/security-advisories/CVE-2023-6239
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.