CVE-2023-2989 Fortra Globalscape Administration Server Out of Bounds Memory Read

2023-06-2219:14:17

CWE-125

rapid7

www.cve.org

fortra globalscape

eft

8.1.0.16

out of bounds

memory read

administration server

vulnerability

AI Score

9.5

Confidence

High

EPSS

0.001

Percentile

45.0%

JSON

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Globalscape EFT",
    "vendor": "Fortra",
    "versions": [
      {
        "lessThan": "8.1.0.16",
        "status": "affected",
        "version": "8.0.0",
        "versionType": "semver"
      }
    ]
  }
]