Critical Vulnerability Discovered in Gladinet CentreStack and Triofox

What changed

A significant vulnerability has been found in the Gladinet CentreStack and Triofox products, which could allow external parties to access files or directories that should remain private. This flaw, categorized as an unauthenticated Local File Inclusion issue, can lead to unintended disclosure of sensitive system files.

The vulnerability has been confirmed to be actively exploited in the wild, raising concerns about the security of users who rely on these platforms for file management.

Who is affected

The vulnerability affects users of Gladinet CentreStack and Triofox, particularly those who have not updated their systems to the latest versions. Organizations utilizing these products should be aware of the potential risks involved.

The following are particularly at risk:

• Gladinet CentreStack users relying on file-sharing capabilities.
• Triofox customers utilizing cloud file management services.
• Organizations that have deployed these applications without proper security configurations.
• Any entity that has not applied updates beyond version 16.7.10368.56560.

What to do

It is crucial for users of Gladinet CentreStack and Triofox to take immediate action to mitigate the risks associated with this vulnerability. The first step is to ensure that all systems are updated to the latest versions to protect against unauthorized access.

Additionally, organizations should review their security configurations and implement best practices to safeguard sensitive information.

• Update to the latest version of Gladinet CentreStack and Triofox.
• Review and enhance security configurations to limit file access.
• Monitor systems for any signs of unauthorized access or exploitation.
• Educate users about the importance of security practices in file management.