Critical FileCatalyst Workflow Flaw Enabling Attackers to Gain Admin Access

Fortra has patched a critical security vulnerability affecting its FileCatalyst Workflow software, identified as CVE-2024-6633. This flaw could be exploited by a remote attacker to gain administrative access to the system. CVE-2024-6633 arises due to the use of a static password to connect to an HSQL database, which is hardcoded into the software.