CVE-2021-41808

LOW

2.0

Descripcion

In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.

Detalles CVE

Puntuacion CVSS v3.12.0

SeveridadLOW

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosHIGH

Interaccion usuarioREQUIRED

Publicado1/18/2022

Ultima modificacion2/23/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

m-files:m-files_server

Debilidades (CWE)

CWE-532CWE-532

Referencias

https://empower.m-files.com/security-advisories/CVE-2021-41808(security@m-files.com)

https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41808/(security@m-files.com)

https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-41808/(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.