Patch now! Fortra GoAnywhere MFT vulnerability exploit available

On January 22, 2024, software company Fortra warned customers about a new authentication bypass vulnerability impacting GoAnywhere MFT (Managed File Transfer) that allows an attacker to create a new admin user.

Fortra GoAnywhere MFT is a file transfer solution that organizations use to exchange their data. Some of the organizations that use GoAnywhere MFT are considered vital infrastructure such as local governments, financial companies, healthcare organizations, energy firms, and technology manufacturers.

The flaw impacts Fortra GoAnywhere MFT 6.x from 6.0.1 …

admin attacker authentication authentication bypass bypass bypass vulnerability customers data exchange exploit file file transfer fortra fortra goanywhere fortra goanywhere mft goanywhere goanywhere mft january managed managed file transfer mft organizations patch software solution transfer vulnerability