PT-2023-4877 · Jscape · Jscape Mft Server

Ron Bowes · Publicado 2023-09-07 · Atualizado 2023-09-13 · CVE-2023-4528

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JSCAPE MFT Server versions prior to 2023.1.9

Description The issue is related to unsafe deserialization in the JSCAPE MFT Server, which allows an attacker to execute arbitrary Java code, including OS commands, via its management interface. This can be achieved by sending a specially crafted Java object in XML encoding. The estimated number of potentially affected devices worldwide is around 1,129, according to ZoomEye.

Recommendations For versions prior to 2023.1.9, update to version 2023.1.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the management interface to minimize the risk of exploitation. Avoid using the vulnerable deserialization mechanism until the issue is resolved.

Correção

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

BDU:2023-05368

CVE-2023-4528

Produtos afetados

Jscape Mft Server

Referências · 16

• https://t.me/cibsecurity/70107 · Publicação no Telegram
• https://twitter.com/Raj_Samani/status/1700083737600365052 · Publicação no Twitter
• https://twitter.com/rapid7/status/1699812830843715881 · Publicação no Twitter
• https://t.me/cvenotify/57759 · Publicação no Telegram
• https://twitter.com/ET_Labs/status/1701359523057844592 · Publicação no Twitter
• https://jscape.com/blog/binary-management-service-patch-cve-2023-4528 · Aviso do Fabricante
• https://rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed · Nota
• https://twitter.com/buzz_sec/status/1699803468477653060 · Publicação no Twitter
• https://twitter.com/iagox86/status/1699819952289783930 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1699883661368119403 · Publicação no Twitter
• https://twitter.com/zoomeye_team/status/1701900022101733789 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2023-05368 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-4528 · Nota de Segurança
• https://twitter.com/Tinolle1955/status/1700249090129559703 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-4528 · Aviso do Fabricante