Mfasoft vulnerabilities
We track 1 vulnerability in Mfasoft products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Mfasoft vulnerabilities
- 7.5 High severity
secure_authentication_server: Authorization Bypass Through User-Controlled Key
An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server (SAS) 1.8.x through 1.9.x before 1.9.040924 allows remote attackers gain access to user tokens without authenticat