CVE-2023-0669

HIGH7.2Insecure deserialization

CISA KEVRansomwareExploitTrendingWas #1High EPSS

Description

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected products

Fortra / goanywhere_managed_file_transfer7.1.2
Fortra / GoAnywhere MFT0 – 7.1.1

Exploits & proofs of concept

exploit-dbGoanywhere Encryption helper 7.1.1 - Remote Code Execution (RCE)by Youssef Muhammad
nucleiFortra GoAnywhere MFT - Remote Code Executionby rootxharsh,iamnoooob,dhiyaneshdk,pdresearch

References

VENDOR_ADVISORYhttps://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml#zerodayfeb1
MISChttps://infosec.exchange/@briankrebs/109795710941843934
MISChttps://www.rapid7.com/blog/post/2023/02/03/exploitation-of-goanywhere-mft-zero-day-vulnerability/
MISChttps://attackerkb.com/topics/mg883Nbeva/cve-2023-0669/rapid7-analysis
EXPLOIThttps://github.com/rapid7/metasploit-framework/pull/17607
MISChttps://duo.com/decipher/fortra-patches-actively-exploited-zero-day-in-goanywhere-mft
MISChttps://frycos.github.io/vulns4free/2023/02/06/goanywhere-forgotten.html
EXPLOIThttp://packetstormsecurity.com/files/171789/Goanywhere-Encryption-Helper-7.1.1-Remote-Code-Execution.html

Updated 22m ago · 8 sources