Read the docs

Mfasoft

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Mfasoft records in CISA KEV

No Mfasoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Secure Authentication Server 1 record MEDIUM

Records

1 record in Secure Authentication Server · all components

TI-2024-31334 CVE-2024-46937 · GHSA-7v6r-jgcw-v2j9

An improper access control (IDOR) vulnerability in the…

Priority MEDIUM 48

An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server (SAS) 1.8.x through 1.9.x before 1.9.040924 allows remote attackers gain a…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00495 Published 2024-09-16 No fix listed CWE-639
Open these records in search →