CVE-2023-6239: Incorrect calculation of effective permissions
Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of metadata-driven permissions in M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7, potentially enabling unauthorized access to the object.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-6239?
CVE-2023-6239 is a vulnerability in M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7 that allows for incorrect calculation of effective permissions, potentially enabling unauthorized access to objects.
What is the severity of CVE-2023-6239?
The severity of CVE-2023-6239 is high with a CVSS score of 8.8.
How does CVE-2023-6239 affect M-Files Server?
CVE-2023-6239 affects M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7 by potentially enabling unauthorized access to objects due to incorrect calculation of effective permissions.
How can I fix CVE-2023-6239?
To fix CVE-2023-6239, it is recommended to update M-Files Server to version 23.11.13168.7 or later.
Where can I find more information about CVE-2023-6239?
More information about CVE-2023-6239 can be found at the following link: [https://www.m-files.com/about/trust-center/security-advisories/cve-2023-6239/](https://www.m-files.com/about/trust-center/security-advisories/cve-2023-6239/)