Threat Investigation
Request a demo

CVE-2022-47634

High

Description

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867.

SeverityHigh
CVSS8.1
Exploit probability43. percentile0.5%
ProductIsode M-link
PublishedJan 1, 2023
First seenJan 1, 2023
Weakness typeCWE-284Improper access control

How to fix

Update
  • isode m-linkr17.0v24 or later

Affected products

ProductAffected versionsFixed in
isode m-linkr16.2v1 ≤ v < r17.0v24r17.0v24

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.