by Kastro
Paper/Archive/CVE-2024-6633

CVE-2024-6633

Fortra FileCatalyst Workflow — Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 67.4.674 × 2013.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confidentiality, integrity, or availability of the software. The HSQLDB is only included to facilitate installation, has been deprecated, and is not intended for production use per vendor guides. However, users who have not configured FileCatalyst Workflow to use an alternative database per recommendations are vulnerable to attack from any source that can reach the HSQLDB.

Affected

ProductAffectedFixed inSource
FileCatalyst Workflow5.0.4 – 5.1.6 Build 139–CNA
filecatalyst_workflow5.0.4 – 5.1.6.139–CISA-ADP

Scores by source

Fortra (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reffortra.com/security/advisories/product-security/fi-2024-011