Medium WID-SEC-2025-1581 1 CVE

Fortra GoAnywhere MFT: Schwachstelle ermöglicht Denial of Service

Published Jul 16, 2025 · Updated Jul 16, 2025 · de-DE

Vendor: Fortra Product: GoAnywhere MFT Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Fortra GoAnywhere MFT ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

GoAnywhere MFT (Managed File Transfer) ist eine Lösung für den sicheren und effizienten Dateitransfer.

Vulnerabilities 1

Medium 5.3

CVE-2025-3871

Broken Access Control Leads to Limited Denial of Service in GoAnywhere MFT 7.8.0 and earlier

Broken access control in Fortra's GoAnywhere MFT prior to 7.8.1 allows an attacker to create a denial of service situation when configured to use GoAnywhere One-Time Password (GOTP) email two-factor authentication (2FA) and the user has not set an email addre…

Fortra GoAnywhere MFT

Jul 16, 2025

Revision history

2025-07-16 #1
Initiale Fassung

References

Fortra Security Advisory vom 2025-07-16
https://www.fortra.com/security/advisories/product-security/fi-2025-009
GitHub Advisory Database vom 2025-07-16
https://github.com/advisories/GHSA-p75j-78r4-rcp2