Brute force vulnerability in M-Files user authentication
CVE-2023-6912

9.8CRITICAL

Key Information:

Vendor

M-files Corporation

Status
M-files Server
Vendor
CVE Published:
20 December 2023

What is CVE-2023-6912?

M-Files Server before version 23.12.13205.0 is susceptible to a brute force attack due to inadequate protections against multiple authentication attempts. This allows attackers to exploit the system by attempting unlimited guesses on user accounts, potentially resulting in unauthorized access and compromise of sensitive data. Organizations using affected versions should prioritize updating their systems to enhance security and protect user credentials.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

M-Files Server 0 < 23.12.13205.0

M-Files Server 23.2 LTS SR6

M-Files Server 23.8 LTS SR4

References

https://product.m-files.com/security-advisories/cve-2023-...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.