CVE-2024-46937 | MFASOFT Secure Authentication Server prior 1.9.040924 get-info-token-properties serial access control

A vulnerability has been found in MFASOFT Secure Authentication Server and classified as critical. This vulnerability affects unknown code of the file /api-selfportal/get-info-token-properties. The manipulation of the argument serial leads to improper access controls.

This vulnerability was named CVE-2024-46937. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.