CVE-2023-4528

Опубликовано: 07 сент. 2023

Источник: nvd

CVSS3: 7.2

EPSS Средний

Описание

Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface

Ссылки

https://www.jscape.com/blog/binary-management-service-patch-cve-2023-4528
Vendor Advisory
https://www.rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed/
Mitigation
Third Party Advisory
https://www.jscape.com/blog/binary-management-service-patch-cve-2023-4528
Vendor Advisory
https://www.rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed/
Mitigation
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redwood:jscape_mft:*:*:*:*:*:*:*:*

Версия до 2023.1.9 (исключая)

EPSS

Процентиль: 98%

0.3186

Средний

7.2 High

CVSS3

Дефекты

CWE-502

Связанные уязвимости

GHSA-4r87-55rm-3493

CVSS3: 7.2

github

около 3 лет назад