CVE-2023-6912
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-6912 is a vulnerability that affects M-Files Server before version 23.12.13205.0. It is categorized as a high-risk vulnerability with a base score of 7.5 and a confidentiality impact of HIGH. The vulnerability allows attackers to perform unlimited authentication attempts, potentially compromising targeted M-Files user accounts by guessing passwords. The exploitability score is 3.9, indicating that it is relatively easy for attackers to take advantage of this vulnerability. The attack vector is through the network, and no user interaction or privileges are required. The impact score is 3.6, indicating a significant risk to confidentiality. To remediate this vulnerability, organizations should update their M-Files Server to version 23.12.13205.0 or higher to ensure protection against brute force attacks and secure user accounts from unauthorized access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions