TI-2024-04899 Aliases CVE-2024-5275 GHSA-6mp6-w28p-c8jp

Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier)…

LOW 35CWE-259Published 2024-06-18 · Updated 2024-08-01

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-259.

Summary

A hard-coded password in the FileCatalyst TransferAgent can be found which can be used to unlock the keystore from which contents may be read out, for example, the private key for certificates. Exploit of this vulnerability could lead to a machine-in-the-middle (MiTM) attack against users of the agent. This issue affects all versions of FileCatalyst Direct from 3.8.10 Build 138 and earlier and all versions of FileCatalyst Workflow from 5.1.6 Build 130 and earlier.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00114 1st percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Fortra	FileCatalyst Direct	3.7 – 3.8.10.138	—	No fix listed	CNA
Fortra	FileCatalyst Workflow	4.9.8 – 5.1.6.130	—	No fix listed	CNA

FileCatalyst Direct VendorFortra Affected 3.7 – 3.8.10.138 Fixed in — No fix listed CNA
FileCatalyst Workflow VendorFortra Affected 4.9.8 – 5.1.6.130 Fixed in — No fix listed CNA

CPE names CISA-ADP · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:fortra:filecatalyst_direct:3.7:::::::*	3.7	—	Fortra
cpe:2.3:a:fortra:filecatalyst_workflow:4.9.8:::::::*	4.9.8	—	Fortra

cpe:2.3:a:fortra:filecatalyst_direct:3.7:*:*:*:*:*:*:* Versions 3.7 — ·Fortra
cpe:2.3:a:fortra:filecatalyst_workflow:4.9.8:*:*:*:*:*:*:* Versions 4.9.8 — ·Fortra

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2024-5275
2026-10-03 Alias added: GHSA-6mp6-w28p-c8jp

References

Advisory 1

https://www.fortra.com/security/advisory/fi-2024-007

Other 1

https://support.fortra.com/filecatalyst/kb-articles/action-required-by-june-18th-2024-filecatalyst-transferagent-ssl-and-localhost-changes-MWQwYjI3ZGItZmQyMS1lZjExLTg0MGItMDAyMjQ4MGE0MDNm

TI-2025-09211 Deserialization Vulnerability in GoAnywhere MFT's License Servlet KEVCVSS 3.1CRITICAL 10.0
TI-2022-20934 Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing… KEVCVSS 3.1CRITICAL 9.8
TI-2024-00185 Authentication Bypass in GoAnywhere MFT CVSS 3.1CRITICAL 9.8
TI-2024-04900 SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier) CVSS 3.1CRITICAL 9.8
TI-2023-00634 Fortra GoAnywhere MFT License Response Servlet Command Injection KEVCVSS 3.1HIGH 7.2
TI-2022-18577 An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike… KEVCVSS 3.1MEDIUM 6.1

See all 49 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences