Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2024-0563
CVE-2024-0563:
M-Files Server vulnerability analysis and mitigation
Overview
A denial of service vulnerability (CVE-2024-0563) was discovered in M-Files Server affecting versions before 24.2 (excluding 23.2 SR7 and 23.8 SR5). The vulnerability was disclosed on February 23, 2024, and allows anonymous users to cause denial of service conditions affecting other anonymous users (M-Files Product).
Technical details
The vulnerability is classified as CWE-770 (Allocation of Resources Without Limits or Throttling) and received a CVSS 3.1 Base Score of 4.3 (Medium) with a temporal score of 3.8. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C, indicating network accessibility, low attack complexity, and low privileges required (M-Files Product).
Impact
When exploited, this vulnerability enables anonymous users to trigger resource usage-based denial of service attacks that specifically affect other anonymous user sessions on the M-Files Server (M-Files Product).
Mitigation and workarounds
Users should upgrade to M-Files Server version 24.2 or later. Alternatively, users on earlier versions can update to either 23.2 LTS SR7 or 23.8 LTS SR5, which also contain fixes for this vulnerability (M-Files Product).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management