CVE-2023-2989 - Fortra Globalscape Administration Server Out of Bounds Memory Read

Back Back to CVE browser

CRITICAL

Fortra Globalscape Administration Server Out of Bounds Memory Read

Published Jun 22, 2023

9.1

CRITICAL

CVSS 3.1

EPSS 0.97%

Description

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited

Affected products

Vendor Fortra Product Globalscape EFT Default
unaffected
- Version
  8.0.0
  Status
  affected
  Constraints
  <8.1.0.16

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Fortra

Globalscape EFT

unaffected

Version	Status	Constraints
8.0.0	affected	<8.1.0.16

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://kb.globalscape.com/Knowledgebase/11586/Is-EFT-susceptible-to-the-Authentication-Bypass-via-Outofbounds-Memory-Read-vulnerability
Vendor Advisory
https://www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/
ExploitThird Party Advisory

Link	Providers	Tags
https://kb.globalscape.com/Knowledgebase/11586/Is-EFT-susceptible-to-the-Authentication-Bypass-via-Outofbounds-Memory-Read-vulnerability		Vendor Advisory
https://www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/		ExploitThird Party Advisory