CVE-2025-14362

Katalog CVE

CVSS 7.3 · High EPSS 0,19%

Kerentanan Improper Restriction of Excessive Authentication Attempts pada fortra goanywhere managed file transfer. Skor CVSS 3.1 7.3 (High) menurut CNA.

Deskripsi (NVD)

The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force.

Rincian

Terbit di NVD

21 April 2026

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.3 (High), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-307: Improper Restriction of Excessive Authentication Attempts

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://fortra.com/security/advisories/product-security/FI-2026-002 advisory vendor