M-Files: >> M-Files Server Security Vulnerabilities
Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts easier.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-01-18
In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.
CVSS Score
2.0
EPSS Score
0.0
Published
2022-01-18
Page 4