CVE-2025-14362: Goanywhere Managed File Transfer: güvenlik açığı

Açıklama (NVD)

The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force.

Özet bilgiler

Ürün

Fortra Goanywhere Managed File Transfer

CVSS v3.1

7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

%0,19 (yüzdelik 9)

CWE

CWE-307

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• fortra.com
• CWE-307