CVE-2024-37393

Summary

CVE-2024-37393 refers to multiple LDAP injection vulnerabilities found in SecurEnvoy Multi-Factor Authentication (MFA) versions prior to 9.4.514. These vulnerabilities arise due to inadequate input validation. An attacker, without authentication, can exploit these flaws to perform blind LDAP injection attacks on the DESKTOP service accessible via the /secserver HTTP endpoint. Successful attacks may lead to the exfiltration of sensitive data from Active Directory, including cleartext passwords for the Local Administrator Password Solution (LAPS) feature.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.