Fortra Product Security Update Advisory (CVE-2024-5276)
Overview
An update has been made available to fix vulnerabilities in Fortra products. users of affected versions are advised to update to the latest version.
Affected Products
FileCatalyst Workflow 5.x versions prior to 5.1.6 Build 135
Resolved Vulnerabilities
A vulnerability in Fortra’s FileCatalyst Workflow that allows an attacker to obtain administrator privileges through SQL injection and delete system tables or create illegal users (CVE-2024-5276)
Vulnerability Patches
FileCatalyst Workflow 5.1.6 Build 139 or later
Referenced Sites
[1] CVE-2024-5276 Detail
Https://nvd.nist.gov/vuln/detail/CVE-2024-5276
[2] Advisory FI-2024-008