CVE-2017-8793 - CVE House
Back to Database
Status published High CVE-2017-8793

An issue was discovered on Accellion FTA devices before FTA_9_12_180....

Vulnerability Description

An issue was discovered on Accellion FTA devices before FTA_9_12_180. By sending a POST request to home/seos/courier/web/wmProgressstat.html.php with an attacker domain in the acallow parameter, the device will respond with an Access-Control-Allow-Origin header allowing the attacker to have site access with a bypass of the Same Origin Policy.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-8793

Credits & Attribution

No credits recorded in the NVD database.

References

More from accellion

View All →
CVE-2022-24110
Kiteworks MFT 7.5 may allow an unauthorized user to reset...
Medium 6.5
CVE-2021-31586
Accellion Kiteworks before 7.4.0 allows an authenticated user to perform...
High 8.8
CVE-2021-31585
Accellion Kiteworks before 7.3.1 allows a user with Admin privileges...
Medium 6.7
CVE-2021-27731
Accellion FTA 9_12_432 and earlier is affected by stored XSS...
Medium 6.1
CVE-2021-27730
Accellion FTA 9_12_432 and earlier is affected by argument injection...
Critical 9.8

Affected Vendor

Affected Software

file transfer appliance
Vulnerable Versions:
0

Timeline

Official Publish: May 5th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.