Description
GoAnywhere MFT has an authentication bypass vulnerability. An attacker can bypass the authentication with a specially crafted HTTP request, add a new administrator and get full access to the system.
Remediation
Upgrade to the latest version of GoAnywhere MFT
References
FI-2024-001 - Authentication Bypass in GoAnywhere MFT
CVE-2024-0204: Fortra GoAnywhere MFT Authentication Bypass Deep-Dive
Related Vulnerabilities
Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-21673)
MySQL CVE-2018-2576 Vulnerability (CVE-2018-2576)
OpenSSL Improper Input Validation Vulnerability (CVE-2009-3245)
Moodle Other Vulnerability (CVE-2007-1647)
Dolibarr Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-1010054)