CVE-2024-9333: Permission bypass in M-Files Connector for Copilot
Published Oct 2, 2024
·Updated
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation
Affected Software
1 affected component
M-Files Connector for Copilot<24.9.3
Event History
Oct 2, 2024
CVE Published
via MITRE·05:57 AM
Data Sourced
via MITRE·05:57 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-9333?
CVE-2024-9333 is classified as a medium severity vulnerability due to its potential for unauthorized document access.
2
How do I fix CVE-2024-9333?
To remediate CVE-2024-9333, upgrade M-Files Connector for Copilot to version 24.9.3 or later.
3
Who is affected by CVE-2024-9333?
CVE-2024-9333 affects users of M-Files Connector for Copilot versions prior to 24.9.3.
4
What type of vulnerability is CVE-2024-9333?
CVE-2024-9333 is a permissions bypass vulnerability that allows unauthorized document access.
5
What does CVE-2024-9333 exploit?
CVE-2024-9333 exploits incorrect access control list calculations within the M-Files Connector for Copilot.