Technical impact
A recorded vulnerability allows an authenticated user with sufficient privileges to add or edit configuration fields in Fortra File Integrity Monitoring (FIM) to embed arbitrary script code into the Asset View UI. When the UI is rendered, the browser will interpret the injected script as executable HTML, potentially allowing the attacker to hijack the user's session, exfiltrate data or bypass authentication. The weakness is not properly escaped user input, identified as CWE-79. The impact is to the confidentiality and integrity of information accessed through the affected UI and could lead to session compromise for users who view the Asset View page.
Affected Systems
All installations of Fortra File Integrity Monitoring (FIM) that use the Asset View UI component in versions prior to 9.4.0.1, formerly known as Tripwire Enterprise.
Risk and Exploitability
The CVSS score is 5.5, and the vulnerability is not currently listed in KEV. No EPSS score is available, so the likelihood of exploitation is not quantified. The attack vector requires legitimate authentication to an instance of FIM and permission to edit node or database configuration. Once those conditions are met, the attacker can plant a permanent XSS payload that triggers for any user who views the affected Asset View page, including users with elevated privileges.
