Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited
References
Configurations
History
30 Jun 2023, 19:21
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
First Time |
Globalscape
Globalscape eft Server |
|
CWE | CWE-125 | |
CPE | cpe:2.3:a:globalscape:eft_server:*:*:*:*:*:*:*:* | |
References | (MISC) https://www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/ - Exploit, Third Party Advisory | |
References | (MISC) https://kb.globalscape.com/Knowledgebase/11586/Is-EFT-susceptible-to-the-Authentication-Bypass-via-Outofbounds-Memory-Read-vulnerability - Vendor Advisory |
22 Jun 2023, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-06-22 20:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-2989
Mitre link : CVE-2023-2989
CVE.ORG link : CVE-2023-2989
JSON object : View
Products Affected
globalscape
- eft_server
CWE
CWE-125
Out-of-bounds Read