← Back

Mfasoft

mfasoft

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Secure Authentication Server
secure_authentication_server
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-46937
1Mfasoft
1Secure Authentication Server
Oct 24, 2024
Sep 16, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server (SAS) 1.8.x through 1.9.x before 1.9.040924 allows remote attackers gain a...Show more
An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server (SAS) 1.8.x through 1.9.x before 1.9.040924 allows remote attackers gain access to user tokens without authentication. The is a brute-force attack on the serial parameter by number identifier: GA00001, GA00002, GA00003, etc.Show less