Extension Blocking is Bypassed when Unzipping
Security Advisory Description Cerberus FTP Server administrators have the option to block end-users from uploading certain file types, identified by file name extension. When end-users attempt to upload or rename files, they encounter a permission error if the target...XSS Vulnerability When Previewing SVG Content
Security Advisory Description When customers preview SVG files in the Cerberus FTP Server Web Client, it executes any scripts embedded within the SVG file in the context of the end-user’s session. This exposes the user to malicious scripts that may hijack the...Zip/Unzip permission bypass vulnerability fixed in Cerberus FTP Server versions 11.0.3 and 10.0.18
Security Advisory Description Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 are vulnerable to a permissions bypass when a user has zip/unzip permission. When zipping, users could zip files and folders that weren’t visible to them;...Cerberus FTP Server Version 11 is here!
You’ve been waiting and now it’s here: Cerberus FTP Server Version 11 is now available for new customers and active service agreement holders, with new features to keep your data and file transfers safe and secure. Cerberus FTP Server Version 11 offers the...XSS Vulnerability in Public Shares fixed in Cerberus FTP Server version 11.0.1 and 10.0.17
Security Advisory Description Cerberus FTP Server Enterprise Edition prior to versions 11.0.1 and 10.0.17 are vulnerable to a cross-site scripting (XSS) attack on Cerberus’ public share page. This XSS vulnerability allows a malicious public share to insert...2FA brute force vulnerabilities fixed in Cerberus FTP Server 11.0.1
Security Advisory Description Cerberus FTP Server releases prior to 11.0.1 were vulnerable to brute force attacks for the 2FA code for a web client user or server administrator when using the Cerberus HOTP 2FA implementation. This vulnerability results from us...Host header attack vulnerabilities fixed in Cerberus FTP Server 11.0 and 10.0.17
Security Advisory Description Password reset links and public share links are vulnerable to HTTP host header attacks in older versions of Cerberus FTP Server. When a user requests to reset their password or to create a public share, Cerberus relies on the HTTP host...S/FTP Server Logging: Three Common Use Cases
Server logs are one of the best tools a system administrator has to ensure your organization’s data and file security, but setting up and monitoring them can be a complicated task that often leaves you drowning in data. Businesses and organizations need a detailed...Security Vulnerabilities Resolved in Cerberus FTP Server 10.0.15
Security Advisory Description We recently released Cerberus FTP Server 10.0.16, and we wanted to elaborate on two security issues we fixed in that release and the previous 10.0.15 release. Email Header Bypass Vulnerability (fixed in 10.0.15) The first issue was an...How To Migrate Cerberus FTP From One Server To Another
Occasionally you may find that you need to move your instance of Cerberus FTP Server from one server to another. While the process is straightforward, there are steps you should take to minimize the risk of issues. First, before doing anything else, you should update...How To Remain HIPAA Compliant With Cerberus FTP Server
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) addresses the minimum standards that health care organizations must implement to protect the security, privacy, and confidentiality of patient data that is transferred over the Internet. Section...FTP Server Password Policy Recommendations: Keeping Your Passwords Secure
No one can escape passwords. Whether it is the password for your Cerberus FTP Server, email, online banking, desktop login, or your favorite online media streaming service, passwords are something that everyone has to deal with regardless of profession. And because...What is FIPS 140-2 and is It Right for Me? How to Make FTP More Secure
One of our most-visited help articles is “How can I make Cerberus FTP Server secure?” In that article, we mention FIPS 140-2, but we still get quite a few emails from customers asking whether they should be using FIPS 140-2 mode in Cerberus. So let’s dig into...
