Greg

**Name of the Vulnerable Software and Affected Versions** FileCatalyst Direct versions 3.8.10 Build 138 and earlier FileCatalyst Workflow versions 5.1.6 Build 130 and earlier **Description** A hard-coded password in the FileCatalyst TransferAgent can be used to unlock the keystore, allowing access to its contents, such as the private key for certificates. This could lead to a machine-in-the-middle (MiTM) attack against users of the agent. **Recommendations** For FileCatalyst Direct versions 3.8.10 Build 138 and earlier, update to a version later than 3.8.10 Build 138 to resolve the issue. For FileCatalyst Workflow versions 5.1.6 Build 130 and earlier, update to a version later than 5.1.6 Build 130 to resolve the issue. As a temporary workaround, consider restricting access to the TransferAgent to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: nvidia-drivers versions before 1.0.7185 nvidia-drivers versions before 1.0.9639 nvidia-drivers versions before 100.14.11 Description: The issue allows local users to modify video card settings, cause a denial of service, and obtain sensitive information due to insecure permissions of /dev/nvidia* device files. Exploitation of this issue can lead to a violation of confidentiality, integrity, and availability of protected information. Recommendations: For versions before 1.0.7185, update to version 1.0.7185 or later. For versions before 1.0.9639, update to version 1.0.9639 or later. For versions before 100.14.11, update to version 100.14.11 or later.