CVE-2023-2989: Fortra Globalscape Administration Server Out of Bounds Memory Read

Fortra Globalscape Administration Server Out of Bounds Memory Read

Status

Published

2023-06-22

Updated

2024-12-05

Assigning organization

rapid7

Description

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortra Globalscape EFT

Default version status: unaffected

8.0.0 to < 8.1.0.16affected

References

https://www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/ ↗
https://kb.globalscape.com/Knowledgebase/11586/Is-EFT-susceptible-to-the-Authentication-Bypass-via-Outofbounds-Memory-Read-vulnerability ↗