Detects Fortra FileCatalyst web interfaces that allow anonymous or guest access. FileCatalyst is a managed file transfer solution, and anonymous access to its portal can expose sensitive files and configuration if not properly secured. This template checks for publicly accessible instances with guest or unauthenticated user functionality.
id: fortra-filecatalyst-anonymous-access
info:
name: Fortra FileCatalyst - Anonymous Access
author: ritikchaddha
severity: low
description: |
Detects Fortra FileCatalyst web interfaces that allow anonymous or guest access. FileCatalyst is a managed file transfer solution, and anonymous access to its portal can expose sensitive files and configuration if not properly secured. This template checks for publicly accessible instances with guest or unauthenticated user functionality.
reference:
- https://www.fortra.com/products/filecatalyst
- https://www.fortra.com/products/filecatalyst/resources/security-best-practices
metadata:
verified: true
max-request: 1
vendor: fortra
product: filecatalyst
shodan-query: title:"FileCatalyst"
fofa-query: title="FileCatalyst"
tags: filecatalyst,fortra,anonymous,exposure,misconfig,vuln
http:
- method: GET
path:
- "{{BaseURL}}/workflow/jsp/downloadFiles.jsp"
redirects: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- '</i>Guest'
- 'Logout</a>'
- 'FileCatalyst'
condition: and
- type: status
status:
- 200
# digest: 490a0046304402201e8bc98bc46481157b6dffa0062c971312abe33cbd003b44d0e74ac60598601402205a298f371c9e6dc0353303acfeb4ef57ed5720294fa275ad296079fc7fed597e:922c64590222798bb761d5b6d8e72950
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.