Unauthorized Access to Admin User Accounts via Administration Portal
Key Information
- Vendor
- Fortra
- Status
- GoAnywhere MFT
- Vendor
- CVE Published:
- 22 January 2024
Badges
Summary
The vulnerability CVE-2024-0204 in Fortra's GoAnywhere MFT software allows an unauthorized user to create an admin user via the administration portal. The issue carries a high CVSS score of 9.8 and can be exploited to create administrative users due to a path traversal weakness in the "/InitialAccountSetup.xhtml" endpoint. There is no evidence of active exploitation of CVE-2024-0204 in the wild, but another flaw in the same product (CVE-2023-0669) was abused by the Cl0p ransomware group to breach nearly 130 victims last year. The recommended action is to immediately upgrade to version 7.4.1 to mitigate this risk.
Affected Version(s)
GoAnywhere MFT <= 6.0.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
News Articles
Malwarebytes CVE-2024-0204Patch now! Fortra GoAnywhere MFT vulnerability exploit available | Malwarebytes
A new vulnerability in Fortra GoAnywhere MFT now has exploit code available that allows an attacker to create a new admin user.
10 months ago
Duo Security CVE-2024-0204Exploit Code Released For Fortra GoAnywhere MFT Flaw
The flaw (CVE-2024-0204) could enable remote, unauthenticated attackers to bypass authentication in order to create new users.
10 months ago
EPSS Score
54% chance of being exploited in the next 30 days.
CVSS V3.1
Timeline
Vulnerability started trending.
First article discovered by Beeping Computers
- 👾
Exploit exists.
Vulnerability published.
Vulnerability Reserved.