Skip to content
CVE PROGRAM SOURCE RECORD2.0 Low

CVE-2021-41808

In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.

Description

In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

M-Files M-Files Server

Default version status: unaffected

  • Online to < 21.11.10775.0affected
  • 2018 to < 21.11.10775.0affected

References