Globalscape Terms Patched -

A third vulnerability also patched in version 8.1.0.16 was an information disclosure flaw. This issue allowed a remote attacker to determine the serial number of the hard drive on which the Globalscape EFT was installed by sending a "trial extension request" message to the administration server. While less severe than an authentication bypass, this information disclosure could provide an attacker with valuable data for future, more targeted attacks.

Always test new patches in a non-production staging environment to ensure compatibility with existing workflows and scripts.

If you’re reviewing a contract or audit finding that says “Globalscape terms patched” :

: Open the file and search for the strings.

CVE-2023-2989 Disclosure Date: June 22, 2023 Affected Versions: Fortra Globalscape EFT versions before 8.1.0.16 Patched Version: 8.1.0.16

This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later.

In the v8.3.2.568 release , Globalscape patched potential software risks by updating its OpenSSL architecture from 3.5.0 to 3.6.1. This proactively mitigated vulnerabilities like CVE-2025-15467.

A legacy concern in automated event-driven environments involves compressed archives. Exploiting a directory traversal flaw ("Zip Slip"), an attacker could upload a maliciously crafted .zip or .tar archive that, when extracted by Globalscape's automation engine, wrote arbitrary files outside the targeted directory. Fortra implemented direct mitigations to intercept and kill malicious path strings during decompression. 3. Step-by-Step: How to Apply Globalscape Hotfix Patches

: Attackers can exploit this flaw to trigger an infinite or resource-heavy loop , instantly knocking critical file transfer systems offline. The Remediation

As of the time of this writing, Globalscape operates as part of , bringing additional resources and security expertise to the patching process. The company’s security practices include: