CVE-2009-4645: Directory traversal vulnerability in web_client_user_guide.html in Accellion Secure File Transfer Appliance...

Security readout for executives and security teams

This flaw could let a remote attacker make an Accellion Secure File Transfer Appliance read files outside the intended help-language path. For a file-transfer appliance, unintended file disclosure could expose sensitive data depending on file permissions and deployment. Public sources do not provide CVSS scoring or active-exploitation evidence. Exposure is limited to organizations still running Accellion Secure File Transfer Appliance versions before 8_0_105, especially if the web interface is reachable from untrusted networks. The provided data does not list CPEs or broader product variants. Prioritize assessment where legacy Accellion file-transfer appliances remain reachable. The issue can disclose files, but urgency depends on whether affected versions exist and whether the web interface is exposed. Treat confirmed pre-8_0_105 systems as high-priority remediation work. Mitigation focus: Identify any Accellion Secure File Transfer Appliance deployments and their exact versions.; Upgrade appliances older than 8_0_105 using vendor-supported guidance.; Restrict appliance web access to trusted administrative and business networks..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.