Denial of service

Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service...

Authentication flaw

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...

Information disclosure

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message...

CVE-2023-2991 Fortra Globalscape Administration Server Information Disclosure

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message...

CVE-2023-2991

CVE-2023-2991 concerns Fortra Globalscape EFT: the admin server exposes the hard drive serial number via a Remote/TER (trial extension request) flow. Technical detail: the vulnerability is an information disclosure in the EFT administration interface, enabling remote retrieval of the server’s HDD...

CVE-2023-2991 Fortra Globalscape Administration Server Information Disclosure

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message...

CVE-2023-2990 Fortra Globalscape Administration Server Denial of Service

Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service...

CVE-2023-2990

CVE-2023-2990 affects Fortra Globalscape EFT Admin Server. Versions prior to 8.1.0.16 are vulnerable to a denial-of-service when a compressed DeflateStream packet is processed, because a specially crafted message decompresses to itself and can trigger recursion/heap issues, potentially crashing t...

CVE-2023-2990 Fortra Globalscape Administration Server Denial of Service

Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service...

CVE-2023-2989

CVE-2023-2989 affects Fortra Globalscape EFT administration server prior to 8.1.0.16, due to an out-of-bounds memory read that can permit authentication bypass. Public details describe a blind read flaw in the EFT admin protocol, enabling a logged-in attacker to impersonate another user under cer...

CVE-2023-2989 Fortra Globalscape Administration Server Out of Bounds Memory Read

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...

CVE-2023-2989 Fortra Globalscape Administration Server Out of Bounds Memory Read

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...

Multiple Vulnerabilities in Fortra Globalscape EFT Administration Server [FIXED]

!Multiple Vulnerabilities in Fortra Globalscape EFT Administration Server \FIXED\https://blog.rapid7.com/content/images/2023/06/GettyImages-1345443906.jpg Earlier this year, Rapid7 researchers undertook a project to analyze managed file transfer applications, due to the number of recent...

CVE-2023-2991: Exposure of Sensitive Information to an Unauthorized Actor

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message...

CVE-2023-2990: Uncontrolled Resource Consumption

Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service...

Globalscape Enhanced File Transfer 安全漏洞

Globalscape Enhanced File Transfer Globalscape EFT is a best-in-class Managed File Transfer MFT solution from Globalscape USA. A security vulnerability exists in Globalscape Enhanced File Transfer versions prior to 8.1.0.16 that stems from the presence of a denial-of-service vulnerability that...

Globalscape Enhanced File Transfer 安全漏洞

Globalscape Enhanced File Transfer Globalscape EFT is a best-in-class Managed File Transfer MFT solution from Globalscape USA. A security vulnerability exists in Globalscape Enhanced File Transfer prior to version 8.1.0.16, which stems from an information disclosure vulnerability that could...

PT-2023-22459

Name of the Vulnerable Software and Affected Versions Fortra Globalscape EFT versions prior to 8.1.0.16 Description The issue concerns an out of bounds memory read in the administration server, which can be exploited to crash the service or bypass authentication. Recommendations For versions prio...

CVE-2023-2989: Out-of-bounds Read

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...

Globalscape Enhanced File Transfer 缓冲区错误漏洞

Globalscape Enhanced File Transfer Globalscape EFT is a best-in-class Managed File Transfer MFT solution from Globalscape USA. A security vulnerability exists in Globalscape Enhanced File Transfer versions prior to 8.1.0.16 that stems from an out-of-bounds memory read issue that could cause the...