CVE-2022-47634

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-01 · updated 2026-06-17
Weakness: CWE-284

Description

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867.

Affected products

Isode M-Link: from r16.2v1 before r17.0v24 — fixed in r17.0v24

How to fix

Upgrade to a fixed version: Isode M-Link r17.0v24. Check the vendor advisory for mitigations.

References

https://www.isode.com/support/security/advisory/m-link-incorrect-access-control-vulnerability-21-12-2022.html
https://www.isode.com/support/security/advisory/m-link-incorrect-access-control-vulnerability-21-12-2022.html

Get alerted when CVE-2022-47634 or the next vulnerability affects your stack