CVE-2024-6633— Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)
Quick assessment
Affected
Fortra FileCatalyst Workflow
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
FileCatalyst Workflow是FileCatalyst公司的一个基于浏览器的大文件传输解决方案。 FileCatalyst Workflow存在安全漏洞，该漏洞源于使用的默认凭据已发布在供应商知识库文章中。
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-6633
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)
Source: CVE Program / CVE List V5
Vulnerability Description
The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confidentiality, integrity, or availability of the software.
The HSQLDB is only included to facilitate installation, has been deprecated, and is not intended for production use per vendor guides. However, users who have not configured FileCatalyst Workflow to use an alternative database per recommendations are vulnerable to attack from any source that can reach the HSQLDB.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
FileCatalyst Workflow 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
FileCatalyst Workflow是FileCatalyst公司的一个基于浏览器的大文件传输解决方案。 FileCatalyst Workflow存在安全漏洞，该漏洞源于使用的默认凭据已发布在供应商知识库文章中。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Fortra | FileCatalyst Workflow | 5.0.4 ~ 5.1.6 Build 139 | - |
|
II. Public POCs for CVE-2024-6633
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-6633
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: Fortra
-
CVE-2026-14316
Heap buffer overflow in boks_sshd revoked-key error handling -
CVE-2026-9864
Fortra BoKS Server Agent adjoin machine-account password gen -
CVE-2026-12627
Fortra's Core Privileged Access Manager (BoKS) autoregistrat -
CVE-2026-79896
Fortra BoKS Manager boks_portmux TLS ClientHello out-of-boun -
CVE-2026-79898
Fortra BoKS Manager crlserver command injection vulnerabilit
Same weakness: CWE-200
-
CVE-2026-14851
Unauthorised disclosure of information on Copart’s online bi -
CVE-2026-103380
Appointment Booking Plugin <= 5.7.3 - Authenticated (Subscri -
CVE-2026-97471
Avada (Fusion) Builder <= 3.16.1 - Unauthenticated Sensitive -
CVE-2026-110146
Chrome<155.0.8059.79信息泄露漏洞 -
CVE-2026-85891
Azure HDInsight Information Disclosure Vulnerability
V. Comments for CVE-2024-6633
No comments yet