CVE-2024-12839

Summary

CVE-2024-12839 is a new authentication bypass vulnerability affecting the login mechanism of CGFIDO from Changing Information Technology. This weakness lies in the device authentication feature where a user's authentication signature, sent by the agent program on their device, can be intercepted by an unauthenticated remote attacker. By acquiring this signature from a forged website, the attacker can successfully log into the system using any device. This poses a significant risk as the attacker does not need valid credentials to gain access, making this vulnerability a critical security concern for affected organizations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.