CVE-2022-24110: Medium severity accellion managed file transfer vulnerability
Published Feb 14, 2022
·Updated
Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later.
Affected Software
1 affected component
Accellion Managed File Transfer<7.6
Event History
Feb 14, 2022
CVE Published
via MITRE·03:52 AM
Data Sourced
via MITRE·03:52 AM
Description
Frequently Asked Questions
1
What is CVE-2022-24110?
CVE-2022-24110 is a vulnerability in Kiteworks MFT 7.5 that allows an unauthorized user to reset other users' passwords.
2
What is the severity of CVE-2022-24110?
CVE-2022-24110 has a severity rating of medium (6.5).
3
How does CVE-2022-24110 affect Kiteworks MFT?
CVE-2022-24110 affects Kiteworks MFT 7.5, allowing an unauthorized user to reset other users' passwords.
4
How can I fix CVE-2022-24110?
CVE-2022-24110 can be fixed by updating to version 7.6 or later of Kiteworks MFT.
5
Where can I find more information about CVE-2022-24110?
More information about CVE-2022-24110 can be found at the following references: [link1](https://github.com/accellion/CVEs/blob/main/CVE-2022-24110.txt), [link2](https://www.kiteworks.com/platform/simple/managed-file-transfer/)