Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-9333

Oct. 4, 2024, 1:50 p.m.

Tags

CWE-281
security@m-files.com
2024-10-02
CVE-2024-9333

Product(s) Impacted

M-Files Connector for Copilot

  • before 24.9.3

Description

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation

Weaknesses

CWE-281
Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

CWE ID: 281

Date

Published: Oct. 2, 2024, 6:15 a.m.

Last Modified: Oct. 4, 2024, 1:50 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

security@m-files.com

References

https://product.m-files.com/ security@m-files.com