CVE-2023-2991CWE-200

Fortra Globalscape Administration Server Information Disclosure

published June 22, 2023

CVSS
—
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00641 · 50.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-06-22T19:22Z
EPSS history
Timeline
  • 22 JUN 19:22Z
    Fortra Globalscape Administration Server Information Disclosure
    cvelistv5