VULNERABILITY INTELLIGENCE

CVE-2023-2989

CVSS score9.1 CRITICAL
EPSS probability0.97%
CISA KEVNot currently listed
Published2023-06-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Description

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited

Weakness classification

  • cve@rapid7.com: CWE-125
  • nvd@nist.gov: CWE-125

Primary references