Lucene search
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.FORTRA_GOANYWHERE_MFT_CVE-2024-0204.NBINHistoryJan 23, 2024 - 12:00 a.m.
Fortra GoAnywhere Managed File Transfer (MFT) < 7.4.1 Authentication Bypass (CVE-2024-0204)
2024-01-2300:00:00
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
12
managed file transfer
authentication bypass
binary data
scanner
cve-2024-0204
7.2 High
AI Score
Confidence
Low
According to its self-reported version, the instance of Fortra GoAnywhere Managed File Transfer (MFT) running on the remote web server is < 7.4.1. It is, therefore, affected by an authentication bypass vulnerability. This can allow an unauthenticated attacker to create an admin user via the administration portal.
Note that Nessus has not tested for this issue but has instead relied only on the application’s self-reported version number.
Binary data fortra_goanywhere_mft_CVE-2024-0204.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| helpsystems | goanywhere_managed_file_transfer | cpe:/a:helpsystems:goanywhere_managed_file_transfer |
Related
packetstorm
packetstorm
Fortra GoAnywhere MFT Unauthenticated Remote Code Execution
2024-02-02 00:00:00
prion
prion
Authentication flaw
2024-01-22 18:15:00
githubexploit
githubexploit
Exploit for Forced Browsing in Fortra Goanywhere Managed File Transfer
2024-02-04 01:40:46
Exploit for Forced Browsing in Fortra Goanywhere Managed File Transfer
2024-01-23 20:16:14
Exploit for Forced Browsing in Fortra Goanywhere Managed File Transfer
2024-01-24 20:10:34
metasploit
metasploit
Fortra GoAnywhere MFT Unauthenticated Remote Code Execution
2024-01-29 17:17:45
cve
cve
CVE-2024-0204
2024-01-22 18:15:20
nuclei
nuclei
Fortra GoAnywhere MFT - Authentication Bypass
2024-01-23 21:05:52
hivepro
hivepro
Critical GoAnywhere MFT Flaw Allows Attackers to Become Admins
2024-01-25 12:55:39
malwarebytes
malwarebytes
Patch now! Fortra GoAnywhere MFT vulnerability exploit available
2024-01-25 13:32:42
nessus
nessus
cvelist
cvelist
CVE-2024-0204 Authentication Bypass in GoAnywhere MFT
2024-01-22 18:05:13
impervablog
impervablog
thn
thn
Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin
2024-01-24 05:32:00
rapid7blog
rapid7blog
CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT
2024-01-23 18:42:31
Metasploit Weekly Wrap-Up 02/09/2024
2024-02-09 19:35:23
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2024-03-05 00:00:00