CVE-2023-2991 Fortra Globalscape Administration Server Information Disclosure

2023-06-2219:22:24

CWE-200

rapid7

www.cve.org

fortra globalscape

eft

administration server

information disclosure

vulnerability

serial number

harddrive

trial extension request

cve-2023-2991

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

27.0%

JSON

Fortra Globalscape EFT’s administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a “trial extension request” message

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Globalscape EFT",
    "vendor": "Fortra",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.0"
      }
    ]
  }
]