Tracker / CVE-2025-1241
CVE-2025-1241
Medium 5.8
Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decryption of data.
Affected products and versions
| fortra | goanywhere_agents · … → 2.2.0 |
|---|---|
| fortra | goanywhere_managed_file_transfer · … → 7.10.0 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.