Progress Confirms Zero-Day Flaw Caused ShareFile Shutdown

Progress Software confirmed on March 14, 2024, that a critical zero-day vulnerability was the cause of the emergency shutdown of its ShareFile Storage Zone Controllers. The company has since released security updates to address the flaw, which was exploited by malicious actors. This vulnerability allowed unauthorized access to sensitive data stored within the affected Storage Zone environments.

The incident prompted Progress Software to immediately take affected Storage Zone Controllers offline to prevent further compromise. The company stated that the vulnerability, identified as CVE-2024-29812, impacted specific versions of the ShareFile Storage Zone Controller software. Customers using these versions were advised to apply the provided patches as soon as possible to restore service and secure their data.

Progress Software has not disclosed the exact number of customers affected or the extent of any data breaches that may have occurred. However, the company has been working with cybersecurity experts and law enforcement to investigate the incident. The advisory issued by Progress Software provides detailed instructions for customers on how to identify if their systems are vulnerable and how to deploy the necessary security updates. The company emphasized its commitment to customer security and ongoing efforts to enhance its product defenses against emerging threats.