Medium severity5.3NVD Advisory· Published Jun 22, 2023· Updated Jun 17, 2026

CVE-2023-2991

Description

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Globalscape/Eft Server
cpe:2.3:a:globalscape:eft_server:*:*:*:*:*:*:*:*
Range: >=8.0.0.38,<=8.1.0.14
Globalscape/EFTllm-create
Fortra/Globalscape EFTllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 8.0.0

Patches

Vulnerability mechanics

References

www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/nvdExploitThird Party Advisory
kb.globalscape.com/Knowledgebase/11589/Is-EFT-susceptible-to-the-Remotely-obtain-HDD-serial-number-vulnerabilitynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000