Fortra GoAnywhere MFT SFTP Brute Force Vulnerability for SSH Key Authentication

A vulnerability exists in Fortra's GoAnywhere MFT SFTP service in versions prior to 7.10.0. The issue arises because the login limit is not enforced for users authenticated with SSH keys, allowing for brute force attacks to guess the SSH keys.

Impact

Exploitation of this vulnerability could lead to successful brute force attacks on SSH keys, potentially allowing unauthorized access via SFTP.

Remediation

Users can upgrade to Fortra GoAnywhere MFT version 7.10.0 or later to address this vulnerability.