github - ghsa-f8xf-39w2-mrc6

ghsa-f8xf-39w2-mrc6

Vulnerability from github

Published

2024-01-22 18:31

Modified

2024-01-22 18:31

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

Show details on source website

JSON

To clipboard

{
   affected: [],
   aliases: [
      "CVE-2024-0204",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-425",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2024-01-22T18:15:20Z",
      severity: "CRITICAL",
   },
   details: "Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.",
   id: "GHSA-f8xf-39w2-mrc6",
   modified: "2024-01-22T18:31:17Z",
   published: "2024-01-22T18:31:17Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-0204",
      },
      {
         type: "WEB",
         url: "https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml",
      },
      {
         type: "WEB",
         url: "https://www.fortra.com/security/advisory/fi-2024-001",
      },
      {
         type: "WEB",
         url: "http://packetstormsecurity.com/files/176683/GoAnywhere-MFT-Authentication-Bypass.html",
      },
      {
         type: "WEB",
         url: "http://packetstormsecurity.com/files/176974/Fortra-GoAnywhere-MFT-Unauthenticated-Remote-Code-Execution.html",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
         type: "CVSS_V3",
      },
   ],
}

cve-2024-0204

Vulnerability from cvelistv5

Published

2024-01-22 18:05

Modified

2025-02-13 17:27

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

References

▼	URL	Tags
	https://www.fortra.com/security/advisory/fi-2024-001	vendor-advisory
	https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml	permissions-required
	http://packetstormsecurity.com/files/176683/GoAnywhere-MFT-Authentication-Bypass.html
	http://packetstormsecurity.com/files/176974/Fortra-GoAnywhere-MFT-Unauthenticated-Remote-Code-Execution.html

Impacted products

	Vendor	Product	Version
	Fortra	GoAnywhere MFT	Version: 6.0.1 ≤

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T17:41:15.984Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.fortra.com/security/advisory/fi-2024-001",
               },
               {
                  tags: [
                     "permissions-required",
                     "x_transferred",
                  ],
                  url: "https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/176683/GoAnywhere-MFT-Authentication-Bypass.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/176974/Fortra-GoAnywhere-MFT-Unauthenticated-Remote-Code-Execution.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "affected",
               product: "GoAnywhere MFT",
               vendor: "Fortra",
               versions: [
                  {
                     lessThan: "7.4.1",
                     status: "affected",
                     version: "6.0.1",
                     versionType: "semver",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               user: "00000000-0000-4000-9000-000000000000",
               value: "Mohammed Eldeeb & Islam Elrfai, Spark Engineering Consultants",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.",
                  },
               ],
               value: "Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.",
            },
         ],
         impacts: [
            {
               capecId: "CAPEC-1",
               descriptions: [
                  {
                     lang: "en",
                     value: "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs",
                  },
               ],
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-425",
                     description: "CWE-425 Direct Request ('Forced Browsing')",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-02-02T17:06:23.244Z",
            orgId: "df4dee71-de3a-4139-9588-11b62fe6c0ff",
            shortName: "Fortra",
         },
         references: [
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.fortra.com/security/advisory/fi-2024-001",
            },
            {
               tags: [
                  "permissions-required",
               ],
               url: "https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml",
            },
            {
               url: "http://packetstormsecurity.com/files/176683/GoAnywhere-MFT-Authentication-Bypass.html",
            },
            {
               url: "http://packetstormsecurity.com/files/176974/Fortra-GoAnywhere-MFT-Unauthenticated-Remote-Code-Execution.html",
            },
         ],
         solutions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "Upgrade to version 7.4.1 or higher. The vulnerability may also be eliminated in non-container deployments by deleting the&nbsp;InitialAccountSetup.xhtml file in the install directory and restarting the services. For container-deployed instances, replace the file with an empty file and restart. For additional information, see&nbsp;<a target=\"_blank\" rel=\"nofollow\" href=\"https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml\">https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml</a>&nbsp;(registration required).<a target=\"_blank\" rel=\"nofollow\" href=\"https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml\"></a>",
                  },
               ],
               value: "Upgrade to version 7.4.1 or higher. The vulnerability may also be eliminated in non-container deployments by deleting the InitialAccountSetup.xhtml file in the install directory and restarting the services. For container-deployed instances, replace the file with an empty file and restart. For additional information, see  https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml  (registration required).  https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml",
            },
         ],
         source: {
            advisory: "XXX-YYY",
            discovery: "UNKNOWN",
         },
         title: "Authentication Bypass in GoAnywhere MFT",
         workarounds: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "Users are encouraged to apply defense-in-depth tactics to limit access to the administrative console. Do not expose the console to the internet and apply web application controls such as a WAF, monitoring, and access controls.&nbsp;",
                  },
               ],
               value: "Users are encouraged to apply defense-in-depth tactics to limit access to the administrative console. Do not expose the console to the internet and apply web application controls such as a WAF, monitoring, and access controls.",
            },
         ],
         x_generator: {
            engine: "Vulnogram 0.1.0-dev",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "df4dee71-de3a-4139-9588-11b62fe6c0ff",
      assignerShortName: "Fortra",
      cveId: "CVE-2024-0204",
      datePublished: "2024-01-22T18:05:13.194Z",
      dateReserved: "2024-01-03T00:12:28.436Z",
      dateUpdated: "2025-02-13T17:27:06.436Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted