Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-0669
HistoryFeb 06, 2023 - 8:15 p.m.

CVE-2023-0669

2023-02-0620:15:14
CWE-502
[email protected]
web.nvd.nist.gov
3
fortra
goanywhere mft
pre-authentication
command injection
license response servlet
deserialization
vulnerability
patched
version 7.1.2

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.969 High

EPSS

Percentile

99.7%

JSON

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

Affected configurations

NVD
Node
fortragoanywhere_managed_file_transferRange<7.1.2

Related

github 1
hivepro 1
malwarebytes 3
prion 1
packetstorm 2
nessus 1
cve 1
githubexploit 6
talosblog 2
zdt 2
nuclei 1
osv 1
qualysblog 3
cvelist 1
thn 6
rapid7blog 4
metasploit 1
cisa_kev 1
attackerkb 1
exploitdb 1
ics 2
impervablog 1
github
github
Withdrawn: Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework
2023-02-06 21:30:29
hivepro
hivepro
Clop Ransomware Group Claims Responsibility for GoAnywhere MFT Attacks
2023-02-13 11:34:45
malwarebytes
malwarebytes
GoAnywhere zero-day opened door to Clop ransomware
2023-02-20 02:00:00
Clop ransomware is victimizing GoAnywhere MFT customers
2023-03-14 04:00:00
Rubrik is latest victim of the Clop ransomware zero-day campaign
2023-03-17 16:30:00
prion
prion
Command injection
2023-02-06 20:15:00
packetstorm
packetstorm
Fortra GoAnywhere MFT Unsafe Deserialization Remote Code Execution
2023-02-09 00:00:00
Goanywhere Encryption Helper 7.1.1 Remote Code Execution
2023-04-10 00:00:00
nessus
nessus
Fortra GoAnywhere Managed File Transfer (MFT) < 7.1.2 Pre-Authentication Command Injection (CVE-2023-0669)
2023-02-22 00:00:00
cve
cve
CVE-2023-0669
2023-02-06 20:15:14
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere Managed File Transfer
2023-02-10 13:02:55
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere Managed File Transfer
2023-02-26 20:22:20
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere Managed File Transfer
2023-02-21 18:47:42
talosblog
talosblog
Threat Source newsletter (Feb. 23, 2023) — Social media sites are making extra security a paid feature
2023-02-23 19:00:45
Incident Response trends Q2 2023: Data theft extortion rises, while healthcare is still most-targeted vertical
2023-07-26 12:00:57
zdt
zdt
Goanywhere Encryption helper 7.1.1 - Remote Code Execution Exploit
2023-04-08 00:00:00
Fortra GoAnywhere MFT Unsafe Deserialization Remote Code Execution Exploit
2023-02-13 00:00:00
nuclei
nuclei
Fortra GoAnywhere MFT - Remote Code Execution
2023-02-10 14:50:32
osv
osv
Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework
2023-02-06 21:30:29
qualysblog
qualysblog
Forta GoAnywhere Zero-Day Exploited By Threat Actors
2023-02-15 23:34:54
Qualys Survey of Top 10 Exploited Vulnerabilities in 2023
2023-09-26 13:04:00
2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
2023-12-19 15:00:00
cvelist
cvelist
CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection
2023-02-06 19:16:19
thn
thn
New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts
2024-05-23 13:50:00
Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks
2023-04-20 11:22:00
Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin
2024-01-24 05:32:00
rapid7blog
rapid7blog
Exploitation of GoAnywhere MFT zero-day vulnerability
2023-02-03 16:18:21
CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT
2024-01-23 18:42:31
Metasploit Weekly Wrap-Up
2023-02-10 19:39:42
metasploit
metasploit
Fortra GoAnywhere MFT Unsafe Deserialization RCE
2023-02-08 15:24:27
cisa_kev
cisa_kev
Fortra GoAnywhere MFT Remote Code Execution Vulnerability
2023-02-10 00:00:00
attackerkb
attackerkb
CVE-2023-0669
2023-02-13 00:00:00
exploitdb
exploitdb
Goanywhere Encryption helper 7.1.1 - Remote Code Execution (RCE)
2023-04-08 00:00:00
ics
ics
#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability
2023-06-07 12:00:00
Understanding Ransomware Threat Actors: LockBit
2023-06-14 12:00:00
impervablog
impervablog
Why Attackers Target the Government Industry
2023-05-09 14:47:17

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.969 High

EPSS

Percentile

99.7%

JSON
Related for NVD:CVE-2023-0669
github1hivepro1malwarebytes3prion1packetstorm2nessus1cve1githubexploit6talosblog2zdt2nuclei1osv1qualysblog3cvelist1thn6rapid7blog4metasploit1cisa_kev1attackerkb1exploitdb1ics2impervablog1