Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-6912

Brute force vulnerability in M-Files user authentication

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
M-Files Corporation

Description

Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an attacker unlimited authentication attempts, potentially compromising targeted M-Files user accounts by guessing passwords.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

M-Files Corporation M-Files Server

Default version status: unaffected

  • 0 to < 23.12.13205.0affected
  • 23.2 LTS SR6unaffected
  • 23.8 LTS SR4unaffected

References