CVE-2022-30731CWE-862

Improper access control vulnerability in My Files prior to version 13.1.00.193 allows attackers to access arbitrary private files in My Files application

Medium · published June 7, 2022

CVSS v3.1
5.1
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

Improper access control vulnerability in My Files prior to version 13.1.00.193 allows attackers to access arbitrary private files in My Files application.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00195 · 8.7th percentile
Weakness
CWE-862 · Missing Authorization
Published
2022-06-07T18:09Z
EPSS history
Timeline
  • 07 JUN 18:09Z
    Improper access control vulnerability in My Files prior to version 13.1.00.193 allows attackers to access arbitrary private files in My Files application
    cvelistv5