← Zuruck zu CVEs

CVE-2024-0204

CRITICAL

9.8

Beschreibung

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht1/22/2024

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

fortra:goanywhere_managed_file_transfer

Schwachen (CWE)

CWE-425CWE-425

Referenzen

http://packetstormsecurity.com/files/176683/GoAnywhere-MFT-Authentication-Bypass.html(df4dee71-de3a-4139-9588-11b62fe6c0ff)

http://packetstormsecurity.com/files/176974/Fortra-GoAnywhere-MFT-Unauthenticated-Remote-Code-Execution.html(df4dee71-de3a-4139-9588-11b62fe6c0ff)

https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml(df4dee71-de3a-4139-9588-11b62fe6c0ff)

https://www.fortra.com/security/advisory/fi-2024-001(df4dee71-de3a-4139-9588-11b62fe6c0ff)

http://packetstormsecurity.com/files/176683/GoAnywhere-MFT-Authentication-Bypass.html(af854a3a-2127-422b-91ae-364da2661108)

http://packetstormsecurity.com/files/176974/Fortra-GoAnywhere-MFT-Unauthenticated-Remote-Code-Execution.html(af854a3a-2127-422b-91ae-364da2661108)

https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml(af854a3a-2127-422b-91ae-364da2661108)

https://www.fortra.com/security/advisory/fi-2024-001(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.