Lucene search
Df4dee71-de3a-4139-9588-11b62fe6c0ffNVD:CVE-2024-0204HistoryJan 22, 2024 - 6:15 p.m.
CVE-2024-0204
2024-01-2218:15:20
CWE-425
df4dee71-de3a-4139-9588-11b62fe6c0ff
web.nvd.nist.gov
5
cve-2024-0204
fortra's goanywhere mft
authentication bypass
unauthorized user
admin user creation
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.651
Percentile
98.0%
Authentication bypass in Fortra’s GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.
Affected configurations
Node
fortragoanywhere_managed_file_transferRange7.0.0–7.4.1
ORfortragoanywhere_managed_file_transferMatch6.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fortra | goanywhere_managed_file_transfer | * | cpe:2.3:a:fortra:goanywhere_managed_file_transfer:*:*:*:*:*:*:*:* |
| fortra | goanywhere_managed_file_transfer | 6.0.0 | cpe:2.3:a:fortra:goanywhere_managed_file_transfer:6.0.0:*:*:*:*:*:*:* |
Related
nessus
nessus
packetstorm
packetstorm
Fortra GoAnywhere MFT Unauthenticated Remote Code Execution
2024-02-02 00:00:00
prion
prion
Authentication flaw
2024-01-22 18:15:00
githubexploit
githubexploit
Exploit for Forced Browsing in Fortra Goanywhere Managed File Transfer
2024-02-04 01:40:46
Exploit for Forced Browsing in Fortra Goanywhere Managed File Transfer
2024-01-23 20:16:14
Exploit for Forced Browsing in Fortra Goanywhere Managed File Transfer
2024-01-24 20:10:34
metasploit
metasploit
Fortra GoAnywhere MFT Unauthenticated Remote Code Execution
2024-01-29 17:17:45
nuclei
nuclei
Fortra GoAnywhere MFT - Authentication Bypass
2024-01-23 21:05:52
cve
cve
CVE-2024-0204
2024-01-22 18:15:20
impervablog
impervablog
cvelist
cvelist
CVE-2024-0204 Authentication Bypass in GoAnywhere MFT
2024-01-22 18:05:13
hivepro
hivepro
Critical GoAnywhere MFT Flaw Allows Attackers to Become Admins
2024-01-25 12:55:39
malwarebytes
malwarebytes
Patch now! Fortra GoAnywhere MFT vulnerability exploit available
2024-01-25 13:32:42
rapid7blog
rapid7blog
CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT
2024-01-23 18:42:31
Metasploit Weekly Wrap-Up 02/09/2024
2024-02-09 19:35:23
thn
thn
Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin
2024-01-24 05:32:00
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2024-03-05 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.651
Percentile
98.0%
Related for NVD:CVE-2024-0204