Information Disclosure Vulnerability in Fortra's GoAnywhere MFT Application
CVE-2024-9945

5.3MEDIUM

Key Information:

Vendor

Fortra
Status
Goanywhere Mft
Vendor
CVE Published:
13 December 2024

What is CVE-2024-9945?

An information disclosure vulnerability has been identified in Fortra's GoAnywhere MFT application that allows unauthorized external access to sensitive resources located within certain admin root folders. This flaw affects versions prior to 7.7.0, posing a risk of exposing critical data to potential attackers. Users are advised to upgrade to the latest version to mitigate this vulnerability and safeguard their systems.

Affected Version(s)

GoAnywhere MFT Windows 0 < 7.7.0

References

https://www.fortra.com/security/advisories/product-securi...
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.