high7.2
CVE-2023-4528
Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS…
Impact
Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redwood | Jscape Mft | before 2023.1.9 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.jscape.com/blog/binary-management-service-patch-cve-2023-4528
- https://www.rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed/
- https://www.jscape.com/blog/binary-management-service-patch-cve-2023-4528
- https://www.rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed/