Description
Incorrect implementation in authentication protocol in M-Files Client before 22.5.11356.0 allows high privileged user to get other users tokens to another resource.
Affected products
M-Files Client before 22.5.11356.0.
More information
Exploiting the vulnerability requires server administrator privileges. CVSS 3.1 Score: 4.8 CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N CWE: CWE-303 Incorrect Implementation of Authentication Algorithm CAPEC: CAPEC-114 Authentication Abuse Internal ID: 161882
