CVE-2024-6633

CRITICAL

9.8

Description

The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confidentiality, integrity, or availability of the software. The HSQLDB is only included to facilitate installation, has been deprecated, and is not intended for production use per vendor guides. However, users who have not configured FileCatalyst Workflow to use an alternative database per recommendations are vulnerable to attack from any source that can reach the HSQLDB.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie8/27/2024

Derniere modification8/29/2025

Sourcenvd

Observations honeypot0

Produits affectes

fortra:filecatalyst_workflow

Faiblesses (CWE)

CWE-200CWE-798CWE-798

References

https://www.fortra.com/security/advisories/product-security/fi-2024-011(df4dee71-de3a-4139-9588-11b62fe6c0ff)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.