Kiteworks Patches 126 Vulnerabilities in Massive Security Update
Kiteworks fixed 126 vulnerabilities, including critical account takeover and code execution, in releases before version 9.5.1.
Kiteworks patched 126 vulnerabilities in Kiteworks Core, Email Protection Gateway, and Secure Data Forms. Critical account-takeover flaws GHSA-xgh2-fgj6-w93r and GHSA-c9w5-4frw-7wqq affect Core and Email Protection Gateway before 9.5.1; Core also had arbitrary code execution GHSA-gmgg-7xhc-75f9 and privilege escalation GHSA-m39v-w8fv-gf3m. Gateway fixes include unauthorized file modification GHSA-5pgq-v8g2-rg2f and GHSA-3p9g-jh62-8f89 plus denial of service GHSA-wwhf-5862-rjxq. Secure Data Forms had unauthorized modification GHSA-9x72-vqwh-v4hv before 9.5.0 and security bypass GHSA-vwvw-rp3m-rm37 before 9.5.1. Active exploitation was not reported; customers should move to 9.5.1 or later.
- Update fixes 126 flaws across Core, Email Protection Gateway, and Secure Data Forms.
- Critical account takeover affects Core and Email Protection Gateway before 9.5.1.
- Core before 9.5.1 also had arbitrary code execution and privilege escalation.
- No in-the-wild exploitation was reported; upgrade to 9.5.1 or later.
From the original article
2 min read at cybersecuritynews.com
Kiteworks has released a major security update that addresses 126 vulnerabilities across its secure data transfer platform and associated applications. The update includes fixes for critical account takeover flaws, high-severity code execution bugs, security bypass issues, unauthorized data modification, privilege escalation, and denial-of-service conditions.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.