CVE-2021-41810

Опубликовано: 02 мая 2022

Источник: nvd

CVSS3: 5.2

CVSS3: 4.8

CVSS2: 3.5

EPSS Низкий

Описание

Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely exploitable

Ссылки

https://www.m-files.com/about/trust-center/security-advisories/cve-2021-41810/
Vendor Advisory
https://www.m-files.com/about/trust-center/security-advisories/cve-2021-41810/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:m-files:server:*:*:*:*:*:*:*:*

Версия до 22.2.11051.0 (исключая)

EPSS

Процентиль: 48%

0.00255

Низкий

5.2 Medium

CVSS3

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-v47f-5m37-hhcx

CVSS3: 4.8

github

почти 4 года назад

Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely exploitable

EPSS

Процентиль: 48%

0.00255

Низкий

5.2 Medium

CVSS3

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79