CVE-2023-4528

HIGH

7.2

Beschreibung

Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface

CVE Details

CVSS v3.1 Bewertung7.2

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienHIGH

BenutzerinteraktionNONE

Veroffentlicht9/7/2023

Zuletzt geandert4/23/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

redwood:jscape_mft

Schwachen (CWE)

CWE-502CWE-502

Referenzen

https://www.jscape.com/blog/binary-management-service-patch-cve-2023-4528(cve@rapid7.com)

https://www.rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed/(cve@rapid7.com)

https://www.jscape.com/blog/binary-management-service-patch-cve-2023-4528(af854a3a-2127-422b-91ae-364da2661108)

https://www.rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed/(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.