All vulnerabilities

Servers and applications

CVE-2024-0204

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

Severity
Critical 9.8
Published
22 Jan 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.4.1
Sources
NVD

Affected software

SoftwareAffected versions
GoAnywhere MFTServers and applications · cpe:a:fortra:goanywhere_managed_file_transfer
  • Version 6.0.0
  • From 7.0.0 before 7.4.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-0204
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-0204