Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-46296 EUVD-2025-203827GHSA-53gg-7r73-4vf2

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access admin…

Published Dec 16, 2025 · Updated Dec 16, 2025 · Assigned by apple

Description

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4.

Affected products

VendorProductAffectedFixed
Claris FileMaker Server unspecified – < 22.0.4 22.0.4

References