Exploit / PoCcritical

Experts released PoC exploit for Fortra GoAnywhere MFT flaw CVE-2024

Security Affairsby @securityaffairsJan 24, 2024 · 14:37 UTC (Jan 24, 2024)2 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2024-0204 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-0204 CVE-2023-0669

Tags: cve-2024-0204 cve-2023-0669 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-0669	Pre-Authentication Deserialization RCE in Fortra GoAnywhere MFT	7.2	100%	KEVRansomwarePoC ×3	Feb 6, 2023 KEV Feb 10, 2023
CVE-2024-0204	Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal	9.8	95%		Jan 22, 2024

From the original article

2 min read at securityaffairs.com

Researchers released PoC exploit code for a recently disclosed critical authentication bypass flaw in Fortra’s GoAnywhere MFT (Managed File Transfer). Researchers with cybersecurity firm Horizon3’s Attack Team published technical details of the recently disclosed vulnerability CVE-2024-0204 impacting Fortra GoAnywhere MFT.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.