CVE-2024-9945

Published Dec 13, 2024

Last updated 2 months ago

CVSS medium 5.3

Overview

Description
An information-disclosure vulnerability exists in Fortra's GoAnywhere MFT application prior to version 7.7.0 that allows external access to the resources in certain admin root folders.
Source
df4dee71-de3a-4139-9588-11b62fe6c0ff
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
5.3
Impact score
1.4
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity
MEDIUM

Weaknesses

df4dee71-de3a-4139-9588-11b62fe6c0ff
CWE-200

Social media

Hype score
Not currently trending

  1. CVE-2024-9945 Information-Disclosure Vulnerability in GoAnywhere MFT Pre-7.7.0 In Fortra's GoAnywhere MFT application versions before 7.7.0, there is an information-disclosure vulnerability. This issue allows ext... https://t.co/cw3ZnapIpe

    @VulmonFeeds

    13 Dec 2024

    46 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References