CVE-2024-9945

Description

An information-disclosure vulnerability exists in Fortra's GoAnywhere MFT application prior to version 7.7.0 that allows external access to the resources in certain admin root folders.

Reserved 2024-10-14 | Published 2024-12-13 | Updated 2024-12-13 | Assigner Fortra

Problem types

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-425 Direct Request ('Forced Browsing')

Product status

Default status
unaffected

Any version before 7.7.0
affected

Credits

xiao xiong reporter

References

www.fortra.com/...ty/advisories/product-security/fi-2024-014 vendor-advisory

cve.org (CVE-2024-9945)

nvd.nist.gov (CVE-2024-9945)

Download JSON