Fortra Filecatalyst Workflow vulnerabilities

CVE-2024-5276 [CRITICAL] CWE-20 CVE-2024-5276: A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify applicati A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this vulnerability. Successful unauthenticated exploitation req

CVE-2024-25153 [CRITICAL] CWE-472 CVE-2024-25153: A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files t A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, includin

CVE-2024-6633 [CRITICAL] CWE-200 CVE-2024-6633: The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confidentiality, integrity, or availability of the software. The HSQLDB is only included to facilitate installation, has been deprecated, and is not intende

CVE-2024-5275 [HIGH] CWE-259 CVE-2024-5275: A hard-coded password in the FileCatalyst TransferAgent can be found which can be used to unlock the A hard-coded password in the FileCatalyst TransferAgent can be found which can be used to unlock the keystore from which contents may be read out, for example, the private key for certificates. Exploit of this vulnerability could lead to a machine-in-the-middle (MiTM) attack against users of the agent. This issue affects all versions of FileCatalyst Dir

CVE-2024-6632 [HIGH] CWE-89 CVE-2024-6632: A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, and availability.