Description
Improper access control vulnerability in M-Files Aino in versions before 24.10 allowed an authenticated user to access object information via incorrect evaluation of effective permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| M-Files | M-Files Aino | < 24.10 | 24.10 |
References
- https://product.m-files.com/security-advisories/CVE-2024-11176 vendor-advisory
- https://empower.m-files.com/security-advisories/CVE-2024-11176 vendor-advisory