CVE-2023-2989 — Fortra Globalscape Administration Server Out of Bounds Memory Read

Description (CNA)

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited

Affected (CNA)

Vendor / product	Versions
Fortra / Globalscape EFT	affected 8.0.0 before 8.1.0.16

CWE

CWE-125

References

https://www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/
https://kb.globalscape.com/Knowledgebase/11586/Is-EFT-susceptible-to-the-Authentication-Bypass-via-Outofbounds-Memory-Read-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/
https://kb.globalscape.com/Knowledgebase/11586/Is-EFT-susceptible-to-the-Authentication-Bypass-via-Outofbounds-Memory-Read-vulnerability

CISA-ADP

No English description supplied.

No references supplied.