CVE-2022-4858 MEDIUM

CVE-2022-4858: Insertion of Sensitive Information into Log File

Vendor M-Files
Product M-Files Server
Weakness CWE-532 · Sensitive info in logs
Published December 30, 2022
Last update February 23, 2026
View on NVD All CVEs

CVSS base score

4.4/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Insertion of Sensitive Information into Log Files in M-Files Server before 22.10.11846.0 could allow to obtain sensitive tokens from logs, if specific configurations were set.

Key dates

02Disclosure timeline

December 30, 2022 CVE published
February 23, 2026 Record updated