Critical Auth Bypass in GoAnywhere MFT: Is It a New Ransomware Gateway? (CVE-2024-0204)

Fortra has disclosed a critical vulnerability in its GoAnywhere MFT (Managed File Transfer) software – an authentication bypass that poses a severe security risk. Upon its successful exploitation, attackers could establish a new admin user, potentially paving the way for additional malicious actions.

GoAnywhere MFT stands as a globally utilized secure managed file transfer solution, facilitating the seamless exchange of data among systems, employees, customers, and trading partners.

Details of the New GoAnywhere MFT Vulnerability, CVE-2024-0204

The vulnerability, identified as …

actions admin attackers auth authentication authentication bypass bypass critical critical vulnerability cve exploitation file file transfer fortra gateway goanywhere goanywhere mft malicious managed managed file transfer mft ransomware risk security security risk software transfer vulnerability