CVE-2022-4858

Medium

Description

Insertion of Sensitive Information into Log Files in M-Files Server before 22.10.11846.0 could allow to obtain sensitive tokens from logs, if specific configurations were set.

SeverityMedium

CVSS4.4

Exploit probability—

ProductM-files Server

PublishedDec 30, 2022

First seenDec 30, 2022

Weakness typeCWE-532CWE-532

How to fix

Update

m-files m-files_server22.10.11846.0 or later

Vendor advisories

product.m-files.com/security-advisories/cve-2022-4858/
empower.m-files.com/security-advisories/CVE-2022-4858

Affected products

Product	Affected versions	Fixed in
m-files m-files_server	v < 22.10.11846.0	22.10.11846.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.