CVE-2025-8148
An Improper Access Control in the SFTP service in Fortra's GoAnywhere MFT prior to version 7.9.0 allows Web Users with an Authentication Alias and a valid SSH key but limited to Password authentication for SFTP to still login using their SSH key.
Vendor
Product
CWE
Yayın Tarihi
2025-12-05 21:15:54
Güncelleme
2026-01-30 16:52:35
Source Identifier
df4dee71-de3a-4139-9588-11b62fe6c0ff
KEV Date Added
-