CVE-2024-25157 — Authentication bypass in GoAnywhere MFT prior to 7.6.0

CVE-2024-25157

Authentication bypass in GoAnywhere MFT prior to 7.6.0 PUBLISHED

Description (CNA)

An authentication bypass vulnerability in GoAnywhere MFT prior to 7.6.0 allows Admin Users with access to the Agent Console to circumvent some permission checks when attempting to visit other pages. This could lead to unauthorized information disclosure or modification.

Affected (CNA)

Vendor / product	Versions
Fortra / GoAnywhere MFT	affected 6.0.1 before 7.6.0

CWE

CWE-303

References

https://www.fortra.com/security/advisories/product-security/fi-2024-009

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.