GoAnywhere MFT’s ‘Secure Folder’ Had a Hidden Exit
A GoAnywhere MFT user with Secure Folders and Secure Mail access could escape their assigned folder and read other server files. Fortra has a fix.
managed file transfer
Cleo’s Login Was Not a Login: Two Flaws Let Low-Privilege Users Reach RCE
Four linked Cleo Harmony weaknesses let a low-privilege user cross SAML and token trust boundaries, become an administrator and reach operating-system command execution.