CVE-2023-6912: Brute force vulnerability in M-Files user authentication
Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an attacker unlimited authentication attempts, potentially compromising targeted M-Files user accounts by guessing passwords.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6912?
CVE-2023-6912 is classified as a high-severity vulnerability due to its potential to allow unlimited brute force authentication attempts.
How do I fix CVE-2023-6912?
To fix CVE-2023-6912, upgrade your M-Files Server to version 23.12.13205.0 or later.
What type of attack does CVE-2023-6912 allow?
CVE-2023-6912 allows attackers to perform brute force attacks, enabling them to exhaustively attempt to guess passwords.
What are the potential consequences of CVE-2023-6912?
The potential consequences of CVE-2023-6912 include compromised M-Files user accounts if passwords are successfully guessed by an attacker.
Which versions of M-Files Server are affected by CVE-2023-6912?
All versions of M-Files Server prior to 23.12.13205.0 are affected by CVE-2023-6912.