Auth bypass in M-Files Corporation Aino
CVE-2024-11176
Improper access control vulnerability in M-Files Aino in versions before 24.10 allowed an authenticated user to access object information via incorrect evaluation of effective permissions.
EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.
Affected products
- M-files Corporation Aino — versions 0
Weakness classification (CWE)
References
- security@m-files.com (vendor-advisory)
- security@m-files.com (vendor-advisory)