CVE-2024-46937

MFASOFT Secure Authentication Server (SAS) versions 1.8.x through 1.9.x before 1.9.040924 are vulnerable to an Improper Access Control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint. The flaw allows unauthenticated remote attackers to perform a brute-force attack o...