Home / CVE DB / CVE-2024-6789
Standard
Vulnerability Identifier

CVE-2024-6789

2024-08-27
Severity Assessment
6.5
MEDIUM
CVSS v3.x Score
Clinical Analysis (Description)

A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files

Vector Sequencing

Attack Parameters

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Impact Consequences

Technical Impact

Unchanged
Scope
High
Confidentiality
None
Integrity
None
Availability
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness Classification

CWE-CWE-22

Timeline

Time Line

PUBLICATION
27 Aug 2024
MODIFICATION
23 Feb 2026
Impact Statistics

Key Metrics

CVSS Score
6.5
MEDIUM
Articles
2
Published
Remediation Protocol

Recommended Solution

No automatic solution found. Check vendor references.
Patch Library
No direct patch listed in database.
Associated Cyber Intelligence

Related News Articles

2 article(s) mentioning this vulnerability

Article #1

Fortinet corrige une vulnérabilité critique dans FortiSIEM, correctif OS injection CVE-2024-6789

Fortinet publie un correctif critique pour une vulnérabilité d'injection OS dans FortiSIEM, renforçant les protocoles de sécurité et protégeant contre…

8
16 Jan 2026 Vulnérabilité CRITICAL
Article #2
8

Fortinet Addresses Severe FortiSIEM Flaw, Patching OS Injection Vulnerability CVE-2024-6789

Fortinet releases critical patch for OS injection vulnerability in FortiSIEM, enhancing security protocols and protecting against unauthenticated remote code execution.

16 Jan 2026 Vulnerability CRITICAL
Recommended Actions for Administrators

Immediate Action Plan

1. Inventory

Identify all affected systems in your infrastructure.

2. Assessment

Assess exposure and criticality for your organization.

3. Mitigation

Apply patches or available workarounds.

4. Verification

Test and confirm effectiveness of applied measures.