CVE-2024-25157: Authentication bypass in GoAnywhere MFT prior to 7.6.0
First published: Wed Aug 14 2024(Updated: )
An authentication bypass vulnerability in GoAnywhere MFT prior to 7.6.0 allows Admin Users with access to the Agent Console to circumvent some permission checks when attempting to visit other pages. This could lead to unauthorized information disclosure or modification.
Credit: df4dee71-de3a-4139-9588-11b62fe6c0ff
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortra Goanywhere Managed File Transfer | <7.6.0 |
Remedy
Upgrade to GoAnywhere MFT 7.6.0
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- agent/remedy
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- vendor/fortra
- canonical/fortra goanywhere managed file transfer