File Copy Service Arbitrary File Write in Progress ShareFile Storage Zones Controller

Executive Summary

This vulnerability exists in Progress ShareFile Storage Zones Controller versions 5.12.6 and below. It involves improper handling of queue items where acknowledgements are sent to an unvalidated callback URL. Combined with a race condition, an attacker who controls the copy queue work can manipulate FileCopyService into processing attacker-controlled metadata and content.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking for unauthorized copy jobs or unusual network traffic patterns. Monitor ShareFile Storage Zones Controller logs for unexpected queue item processing or callback URL interactions. Inspect file system writes by the service account to IIS directories for suspicious content.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to cause unauthorized file operations or data leakage. The impact includes potential integrity and availability issues as the service may process malicious content or metadata without validation.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows unauthorized manipulation of file copy workflows and potential writing of attacker-controlled content to accessible locations. This could lead to unauthorized data access or modification, which may violate GDPR's data integrity and confidentiality requirements or HIPAA's safeguards for protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Update Progress ShareFile Storage Zones Controller to a version above v5.12.6 to address the vulnerability. Ensure proper validation of callback URLs and implement safeguards against race conditions in queue processing.

Useful 0 Not Useful 0