CVE-2024-6633

CRITICAL

9.8

Beschreibung

The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confidentiality, integrity, or availability of the software. The HSQLDB is only included to facilitate installation, has been deprecated, and is not intended for production use per vendor guides. However, users who have not configured FileCatalyst Workflow to use an alternative database per recommendations are vulnerable to attack from any source that can reach the HSQLDB.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht8/27/2024

Zuletzt geandert8/29/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

fortra:filecatalyst_workflow

Schwachen (CWE)

CWE-200CWE-798CWE-798

Referenzen

https://www.fortra.com/security/advisories/product-security/fi-2024-011(df4dee71-de3a-4139-9588-11b62fe6c0ff)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.