Lucene search
FortraCVE-2024-6632HistoryAug 27, 2024 - 3:15 p.m.
CVE-2024-6632
2024-08-2715:15:17
CWE-89
Fortra
web.nvd.nist.gov
29
filecatalyst workflow
sql injection
confidentiality
integrity
availability
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
20.0%
A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, and availability.
Affected configurations
Node
fortrafilecatalyst_workflowRange5.0.4–5.1.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fortra | filecatalyst_workflow | * | cpe:2.3:a:fortra:filecatalyst_workflow:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "FileCatalyst Workflow",
"vendor": "Fortra",
"versions": [
{
"lessThanOrEqual": "5.1.6 Build 139",
"status": "affected",
"version": "5.0.4",
"versionType": "semver"
}
]
}
]
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
20.0%
Related for CVE-2024-6632