Cerberus FTP Server
Secure File Transfer News
Cerberus FTP Server 2024.1 supports SSH strict Kex Extension
Starting in version 2024.1, Cerberus FTP will offer the OpenSSH strict key exchange extension to limit Terrapin style attacks to SSH/SFTP. Overview On December 18, 2023, NIST published CVE-2023-48795 which details a vulnerability where a remote attacker could bypass...
Cerberus FTP Server 13.2 One Time Password Public File Sharing
One Time Password (OTP) secured public file sharing is now available in Cerberus FTP Server 13.2. With this release, users have the ability to restrict and track access of public file shares from the web-client with a new security option that restricts access to the...
Authenticated User Full Path Disclosure
Authenticated User Remote Full Path Disclosure Vulnerability fixed in Cerberus FTP Server 13.2.1 Cerberus FTP Server versions prior to 13.2.1 are vulnerable to an authenticated user full path disclosure in the Web application of Cerberus FTP server (CVE-2023-50452)....
Maintenance Release Available for Cerberus FTP (CVE-2023-50452)
Learn more about the recommended actions and the maintenance release Redwood has made available to eliminate a minor vulnerability from CVE-2023-50452. In response to security incidents which have impacted other file transfer providers over the past year,...
A Guide to ISO 27001-Compliant File Transfer
The International Organization for Standardization (ISO) 27001 standard defines requirements that an organization’s information security management system must meet for the organization to receive third-party certification for its information security practices. ...
Controlled Unclassified Information (CUI) Data Transfer Compliance Guide
If your organization handles data from or for the U.S. federal government, your responsibilities to protect that data don’t end with FIPS 140-2 compliance. Organizations that handle, process, receive or transmit a relatively new classification of sensitive data,...
A Guide to CMMC File and Data Transfer Requirements
The U.S. Department of Defense (DoD) is in the midst of an ambitious effort to improve the security of any information system that processes, transmits or stores sensitive data. Known as the Cybersecurity Maturity Model Certification (CMMC), this effort will become a...
Cerberus FTP Server 13.2 One Time Password Public File Sharing
One-Time Password (OTP) secured public file sharing is now available in Cerberus FTP Server 13.2. With this release, users have the ability to restrict and track access of public file shares from the web-client with a new security option that restricts access to the...
Cerberus FTP Server 12.11 Auto Delete Files of a Public Share on Expiration
Starting with version 12.11now has the ability for a user to delete the contents of a public share when the share itself has expired. There is an additional feature for both the Web Administration and the Web Client to be able to delete the contents of a public share...
Cerberus FTP Server Version 13.2 Now Available
We are excited to announce Version 13.2, the latest update for Cerberus FTP Server! There are two features included in this release centered around improving security and expanding integrations for Enterprise and Enterprise Plus plans. See full release notes here....
New Feature Highlights in Cerberus FTP Server Version 13
In case you missed our earlier announcement, we released Cerberus FTP Server Version 13 on April 10th. In this post, we want to highlight some of the new features and benefits that administrators and users will enjoy. (Of course, you can always read the full release...
Cerberus FTP Server 13.0 Introduces Single Sign-On Support
Single Sign-On (SSO) provides a seamless authentication experience to users, allowing them to log in once and access all authorized applications without the need to enter separate credentials. Security Assertion Markup Language (SAML) is a standard protocol for...
Evaluating Methods to Securely Transfer Cisco Firmware Updates
The typical system administrator manages over 20 devices, and when it comes to network infrastructure there’s a good chance that those devices are made by Cisco. This ubiquity makes Cisco software and firmware updates a multi-day chore for many admins, and the volume...
Correction in IP Address Range calculation from CIDR
In Cerberus FTP Server version 13.1, we are correcting how we convert a given Classless Inter-Domain Routing notation (CIDR) to the corresponding IP Address range. CIDR use in Cerberus Cerberus Admin Console has two places where administrators use CIDR notations to...
Multiple Host Keys in SSH
In Cerberus FTP Server 13.1, we have implemented support for multiple SSH host keys. This user-requested feature allows enabling one or more of the currently supported key types: RSA, DSA, ECDSA, EdDSA 25519 and EdDSA 448. In order to allow this feature, we have...
Certificate Generation Enhancements
In Cerberus FTP Server 13.1, we have moved Certificate Signing Request (CSR) functionality from a Windows dialog into the web based user interface. The associated menu item under Tools has also been removed. This means that administrators can now access this...
Host header attack vulnerabilities fixed in Cerberus FTP Server 11.0 and 10.0.17
Password reset links and public share links are vulnerable to HTTP host header attacks in versions before 11.0.
Guide to SSL: What is an SSL Certificate and How Does it Make Your Website Secure?
What is SSL? SSL (Secured Sockets Layer), and its successor TLS (Transport Layer Security), are cryptographic protocols used to secure and encrypt sensitive information like credit card numbers, usernames, passwords, and other private data sent over the internet....
XSS Vulnerability When Previewing SVG Content
Security Advisory Description When customers preview SVG files in the Cerberus FTP Server Web Client, it executes any scripts embedded within the SVG file in the context of the end-user's session. This exposes the user to malicious scripts that may hijack the user's...
Extension Blocking is Bypassed when Unzipping
When unzipping files through the Web Client, checking for blocked extensions is omitted. After the fix, when the end-user unzips an archive from Web Client, the extension of each archived file is now checked before being expanded. Cerberus now reports an error to the end-user for each file that was blocked during unzip.
Explore what Cerberus FTP Server can do for you
- 25 Day Free Trial
- No Credit Card Required
- Up and running in less than 15 mins
