Lucene search

CVE-2023-0669

🗓️ 06 Feb 2023 20:14:15Reported by rapid7Type

cve🔗 web.nvd.nist.gov👁 737 Views🌐 26 Media mentions

Ft GoAnywhere MFT pre-auth cmd injection vuln in License Response Servlet, patched in v7.1.

Reporter	Title	Published	Views	Family All 46
Packet Storm	Fortra GoAnywhere MFT Unsafe Deserialization Remote Code Execution	9 Feb 202300:00	–	packetstorm
Packet Storm	Goanywhere Encryption Helper 7.1.1 Remote Code Execution	10 Apr 202300:00	–	packetstorm
Malwarebytes	Clop ransomware is victimizing GoAnywhere MFT customers	14 Mar 202304:00	–	malwarebytes
Malwarebytes	GoAnywhere zero-day opened door to Clop ransomware	20 Feb 202302:00	–	malwarebytes
Malwarebytes	Rubrik is latest victim of the Clop ransomware zero-day campaign	17 Mar 202316:30	–	malwarebytes
Tenable Nessus	Fortra GoAnywhere Managed File Transfer (MFT) < 7.1.2 Pre-Authentication Command Injection (CVE-2023-0669)	22 Feb 202300:00	–	nessus
Hive Pro Threat Advisories	Clop Ransomware Group Claims Responsibility for GoAnywhere MFT Attacks	13 Feb 202311:34	–	hivepro
Prion	Command injection	6 Feb 202320:15	–	prion
Github Security Blog	Withdrawn: Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework	6 Feb 202321:30	–	github
Rapid7 Blog	Exploitation of GoAnywhere MFT zero-day vulnerability	3 Feb 202316:18	–	rapid7blog

Nvd

Node

fortra goanywhere_managed_file_transferRange<7.1.2

[
  {
    "defaultStatus": "unaffected",
    "product": "Goanywhere MFT",
    "vendor": "Fortra",
    "versions": [
      {
        "lessThanOrEqual": "7.1.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
github	www.github.com/rapid7/metasploit-framework/pull/17607
attackerkb	www.attackerkb.com/topics/mg883Nbeva/cve-2023-0669/rapid7-analysis
rapid7	www.rapid7.com/blog/post/2023/02/03/exploitation-of-goanywhere-mft-zero-day-vulnerability/
my	www.my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml
duo	www.duo.com/decipher/fortra-patches-actively-exploited-zero-day-in-goanywhere-mft
frycos	www.frycos.github.io/vulns4free/2023/02/06/goanywhere-forgotten.html
packetstormsecurity	www.packetstormsecurity.com/files/171789/Goanywhere-Encryption-Helper-7.1.1-Remote-Code-Execution.html
infosec	www.infosec.exchange/@briankrebs/109795710941843934

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Feb 2023 20:15Current

7.4High risk

Vulners AI Score7.4

CVSS37.2

EPSS0.971