Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-4528

JSCAPE MFT Server Unsafe Deserialization on Management Port

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Redwood Software JSCAPE MFT Server

Default version status: unaffected

  • 0 to < 2023.1.9affected

References