| Package | Affected versions | Patched versions |
|---|---|---|
| goanywhere agents | < 2.2.0 | 2.2.0 |
| goanywhere managed file transfer | < 7.10.0 | 7.10.0 |
Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decryption of data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free