Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-6PM2-J2V8-H3CJ
HistoryFeb 06, 2023 - 9:30 p.m.

Withdrawn: Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework

2023-02-0621:30:29
CWE-502
GitHub Advisory Database
github.com
53
fortra goanywhere mft
pre-authentication
command injection
vulnerability
license response servlet
deserialization

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.969 High

EPSS

Percentile

99.7%

JSON

Withdrawn

This advisory has been withdrawn because it was incorrectly associated with the metasploit-framework package, which is not affected by this CVE, and the actual vulnerable component does not fit within our supported ecosystems. This link is maintained to preserve external references.

Original Description

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object.

Affected configurations

Vulners
Node
metasploitmetasploit_frameworkRange≤6.0.33
CPENameOperatorVersion
metasploit-frameworkle6.0.33

Related

hivepro 1
malwarebytes 3
prion 1
nessus 1
packetstorm 2
cve 1
githubexploit 6
talosblog 2
nuclei 1
zdt 2
osv 1
qualysblog 3
cvelist 1
nvd 1
thn 6
rapid7blog 4
metasploit 1
cisa_kev 1
attackerkb 1
exploitdb 1
ics 2
impervablog 1
hivepro
hivepro
Clop Ransomware Group Claims Responsibility for GoAnywhere MFT Attacks
2023-02-13 11:34:45
malwarebytes
malwarebytes
GoAnywhere zero-day opened door to Clop ransomware
2023-02-20 02:00:00
Clop ransomware is victimizing GoAnywhere MFT customers
2023-03-14 04:00:00
Rubrik is latest victim of the Clop ransomware zero-day campaign
2023-03-17 16:30:00
prion
prion
Command injection
2023-02-06 20:15:00
nessus
nessus
Fortra GoAnywhere Managed File Transfer (MFT) < 7.1.2 Pre-Authentication Command Injection (CVE-2023-0669)
2023-02-22 00:00:00
packetstorm
packetstorm
Fortra GoAnywhere MFT Unsafe Deserialization Remote Code Execution
2023-02-09 00:00:00
Goanywhere Encryption Helper 7.1.1 Remote Code Execution
2023-04-10 00:00:00
cve
cve
CVE-2023-0669
2023-02-06 20:15:14
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere Managed File Transfer
2023-02-10 13:02:55
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere Managed File Transfer
2023-02-26 20:22:20
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere Managed File Transfer
2023-02-21 18:47:42
talosblog
talosblog
Threat Source newsletter (Feb. 23, 2023) — Social media sites are making extra security a paid feature
2023-02-23 19:00:45
Incident Response trends Q2 2023: Data theft extortion rises, while healthcare is still most-targeted vertical
2023-07-26 12:00:57
nuclei
nuclei
Fortra GoAnywhere MFT - Remote Code Execution
2023-02-10 14:50:32
zdt
zdt
Goanywhere Encryption helper 7.1.1 - Remote Code Execution Exploit
2023-04-08 00:00:00
Fortra GoAnywhere MFT Unsafe Deserialization Remote Code Execution Exploit
2023-02-13 00:00:00
osv
osv
Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework
2023-02-06 21:30:29
qualysblog
qualysblog
Forta GoAnywhere Zero-Day Exploited By Threat Actors
2023-02-15 23:34:54
Qualys Survey of Top 10 Exploited Vulnerabilities in 2023
2023-09-26 13:04:00
2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
2023-12-19 15:00:00
cvelist
cvelist
CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection
2023-02-06 19:16:19
nvd
nvd
CVE-2023-0669
2023-02-06 20:15:14
thn
thn
New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts
2024-05-23 13:50:00
Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks
2023-04-20 11:22:00
Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin
2024-01-24 05:32:00
rapid7blog
rapid7blog
Exploitation of GoAnywhere MFT zero-day vulnerability
2023-02-03 16:18:21
CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT
2024-01-23 18:42:31
Metasploit Weekly Wrap-Up
2023-02-10 19:39:42
metasploit
metasploit
Fortra GoAnywhere MFT Unsafe Deserialization RCE
2023-02-08 15:24:27
cisa_kev
cisa_kev
Fortra GoAnywhere MFT Remote Code Execution Vulnerability
2023-02-10 00:00:00
attackerkb
attackerkb
CVE-2023-0669
2023-02-13 00:00:00
exploitdb
exploitdb
Goanywhere Encryption helper 7.1.1 - Remote Code Execution (RCE)
2023-04-08 00:00:00
ics
ics
#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability
2023-06-07 12:00:00
Understanding Ransomware Threat Actors: LockBit
2023-06-14 12:00:00
impervablog
impervablog
Why Attackers Target the Government Industry
2023-05-09 14:47:17

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.969 High

EPSS

Percentile

99.7%

JSON
Related for GHSA-6PM2-J2V8-H3CJ
hivepro1malwarebytes3prion1nessus1packetstorm2cve1githubexploit6talosblog2nuclei1zdt2osv1qualysblog3cvelist1nvd1thn6rapid7blog4metasploit1cisa_kev1attackerkb1exploitdb1ics2impervablog1