CVE-2021-41808CWE-532

In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.

Low · published January 18, 2022

CVSS v3.1
2.0
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.

The record
Technical detail
CVSS v3.1
2.0 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00246 · 15.0th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2022-01-18T16:51Z
EPSS history
Timeline
  • 18 JAN 16:51Z
    In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.
    cvelistv5