Brute force vulnerability in M-Files user authentication

CVE-2023-6912

What is CVE-2023-6912?

M-Files Server before version 23.12.13205.0 is susceptible to a brute force attack due to inadequate protections against multiple authentication attempts. This allows attackers to exploit the system by attempting unlimited guesses on user accounts, potentially resulting in unauthorized access and compromise of sensitive data. Organizations using affected versions should prioritize updating their systems to enhance security and protect user credentials.

References