CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-02-06
Fortra GoAnywhere MFT License Response Servlet Deserialization Remote Code Execution (RCE) Vulnerability (CVE-2023-0669) Analysis and Mitigation Guide
[Affected Scope] Fortra (formerly HelpSystems) GoAnywhere MFT versions prior to 7.1.2
[Impact] An unauthenticated remote attacker can execute arbitrary system commands on the target server by sending a malicious serialized object to the License Response Servlet.
[Mitigation] Immediately upgrade GoAnywhere MFT to version 7.1.2 or higher, and restrict external access to the administrator console port (9006).