Unrated severityNVD Advisory· Published Jun 22, 2023· Updated Dec 6, 2024

Fortra Globalscape Administration Server Information Disclosure

CVE-2023-2991

Description

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fortra/Globalscape EFTllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 8.0.0

Patches

Vulnerability mechanics

References

kb.globalscape.com/Knowledgebase/11589/Is-EFT-susceptible-to-the-Remotely-obtain-HDD-serial-number-vulnerabilitymitre
www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000