CVEvulnerability

CVE-2025-14362

7.3 HIGH Published 2026-04-21 Modified 2026-10-07 Official page ↗
Status
Analyzed
Published
2026-04-21
Last modified
2026-10-07
Assigner
df4dee71-de3a-4139-9588-11b62fe6c0ff
CVSS 3.1 (df4dee71-de3a-4139-9588-11b62fe6c0ff)
7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-307

Description

The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force.

Affected configurations

• fortra goanywhere managed file transfer (< 7.10.0)

Related

Weakness · CWE (1)

  • CWE-307 Improper Restriction of Excessive Authentication Attempts weakness

References