CVE-2023-2991

CVSS V2 None CVSS V3 None

Description

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message

Overview

CVE ID
CVE-2023-2991

Assigner
rapid7

Vulnerability Status
PUBLISHED

Published Version
2023-06-22T19:22:24.434Z

Last Modified Date
2023-06-22T19:22:24.434Z

Weakness Enumerations

CWE	URL
CWE-200	http://cwe.mitre.org/data/definitions/200.html

References

Reference URL	Reference Tags
https://www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/
https://kb.globalscape.com/Knowledgebase/11589/Is-EFT-susceptible-to-the-Remotely-obtain-HDD-serial-number-vulnerability

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-2991
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2991

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 21:55:38				Added to TrackCVE