CVE-2024-37393 | SecurEnvoy MFA prior 9.4.514 Desktop Service /secserver ldap injection

A vulnerability has been found in SecurEnvoy MFA and classified as critical. Affected by this vulnerability is an unknown functionality of the file /secserver of the component Desktop Service. The manipulation leads to ldap injection.

This vulnerability is known as CVE-2024-37393. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.