CVE-2022-1606

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects.

Score

CVSS 3.1 4.3 Medium

Status

Modified - security@m-files.com

Published

2022-11-30

Last modified

2026-02-23

Weaknesses

CWE-269

Affected products

• M-files Server (M-files)

References

• https://empower.m-files.com/security-advisories/CVE-2022-1606
• https://product.m-files.com/security-advisories/cve-2022-1606/
• https://www.m-files.com/about/trust-center/security-advisories/cve-2022-1606/