Unauthorized Access to Admin User Accounts via Administration Portal

CVE-2024-0204

9.8CRITICAL

Key Information

Vendor: Fortra
Status: GoAnywhere MFT
Vendor: CVE Published:; 22 January 2024

Badges

📈 Trended📈 Score: 12,300👾 Exploit Exists🟡 Public PoC🟣 EPSS 40%📰 News Worthy

What is CVE-2024-0204?

CVE-2024-0204 is a serious vulnerability found in Fortra's GoAnywhere MFT, a managed file transfer solution widely used for secure data exchange and compliance. The flaw allows an unauthorized user to bypass authentication processes within the administration portal, enabling the creation and management of admin user accounts. This vulnerability poses significant risks to organizations by potentially exposing sensitive data and allowing unauthorized control over critical system functionalities.

Technical Details

The vulnerability stems from an authentication bypass in versions of GoAnywhere MFT prior to 7.4.1. It enables malicious users to gain access to the administration portal without proper authentication. This may lead to the manipulation of user accounts and system configurations, which can severely compromise system integrity and security.

Impact of the Vulnerability

Unauthorized Access and Control: Attackers can create admin accounts, granting them elevated privileges and unrestricted access to the entire system, potentially leading to unauthorized data manipulation.
Data Breach Risks: With access to admin functionalities, attackers can exfiltrate sensitive data, resulting in potential data breaches and loss of confidentiality for the organization.
Compliance Violations: Organizations that rely on GoAnywhere MFT for regulatory compliance could face severe repercussions due to unauthorized access or data exposure, potentially leading to legal consequences and loss of stakeholder trust.

Affected Version(s)

GoAnywhere MFT <= 6.0.1

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-0204
Created by horizon3ai

CVE-2024-0204
Created by cbeek-r7

CVE-2024-0204
Created by adminlove520