medium5.8
CVE-2025-1241
Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users t…
Impact
Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decryption of data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortra | Goanywhere Agents | before 2.2.0 |
| Fortra | Goanywhere Managed File Transfer | before 7.10.0 |