Fortra has issued a critical security advisory regarding a hard-coded password vulnerability in its FileCatalyst software, explicitly affecting the TransferAgent component.
CVE-2024-5275 vulnerability poses a significant risk to users, potentially enabling machine-in-the-middle (MiTM) attacks.
The vulnerability stems from a hard-coded password in the FileCatalyst TransferAgent, which can be exploited to unlock the Keystore.
This keystore contains sensitive information, such as private keys for certificates. If exploited, attackers could intercept and manipulate data, leading to severe security breaches.
The issue impacts all versions of FileCatalyst Direct up to and including 3.8.10 Build 138, and all versions of FileCatalyst Workflow up to and including 5.1.6 Build 130.
Scan Your Business Email Inbox to Find Advanced Email Threats - Try AI-Powered Free Threat Scan
Users of these versions are strongly advised to take immediate action to mitigate the risk.
The vulnerability has been assigned a high severity rating with a CVSS v3.1 score of 7.8.
The score reflects the potential to significantly impact the affected systems’ confidentiality, integrity, and availability.
Fortra has provided specific remediation steps to address this vulnerability:
Additionally, for those using the FileCatalyst TransferAgent remotely, it is recommended to update REST calls to “http”.
If “https” is still required, users should generate a new SSL key and add it to the agent keystore.
Fortra has published a detailed knowledge article titled “Action Required by June 18th 2024: FileCatalyst TransferAgent SSL and localhost changes,” which provides further guidance on the necessary actions to secure affected systems.
This vulnerability highlights the critical importance of regular software updates and vigilant security practices.
FileCatalyst Direct and Workflow users are urged to follow Fortra’s recommendations promptly to safeguard their systems against potential exploits.
Free Webinar! 3 Security Trends to Maximize MSP Growth -> Register For Free
Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…
Hackers are making some phishing pages harder to track by changing the code delivered to…
A cyber incident reportedly forced a British power plant to halt operations for about four…
Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…
TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…
A fake student resume is being used to place a remote-access tool on researchers’ Windows…