CVE-2021-41808

Description

In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.

Risk Information

Base Score

2.3

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.048

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-41807,CVE-2021-41808,CVE-2021-41809 are affected in M Files Online 22.1.11017.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234