CVE-2024-11176

MEDIUM

M-Files Aino <24.10 - Info Disclosure

Title source: llm
STIX 2.1

Description

Improper access control vulnerability in M-Files Aino in versions before 24.10 allowed an authenticated user to access object information via incorrect evaluation of effective permissions.

References (2)

Scores

CVSS v4 5.3
EPSS 0.0003
EPSS Percentile 7.6%
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-732 CWE-863
Status published
Products (1)
M-Files Corporation/M-Files Aino < 24.10
Published Nov 20, 2024
Tracked Since Feb 18, 2026