parent
5ced0a8e54
commit
327cf651c5
|
@ -2,7 +2,9 @@ id: CVE-2024-0204
|
|||
|
||||
info:
|
||||
name: Fortra GoAnywhere MFT - Authentication Bypass
|
||||
author: DhiyaneshDK
|
||||
author:
|
||||
- DhiyaneshDK
|
||||
- GraysonsMortalEnemy
|
||||
severity: critical
|
||||
description: |
|
||||
Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.
|
||||
|
@ -19,7 +21,9 @@ info:
|
|||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
shodan-query: http.favicon.hash:1484947000
|
||||
shodan-query:
|
||||
- http.favicon.hash:1484947000,1828756398,1170495932
|
||||
- html:InvalidBrowser.xhtml
|
||||
tags: cve,cve2024,auth-bypass,goanywhere
|
||||
|
||||
http:
|
||||
|
@ -39,4 +43,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502200c0737654cbbb14c8e7da4470731e92dace06ddccf481af6ed760cb99c5d75e5022100be491a724570489903e091ba728fa5d7fee4ef4cefd643d1c89ca314edd55f32:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502200c0737654cbbb14c8e7da4470731e92dace06ddccf481af6ed760cb99c5d75e5022100be491a724570489903e091ba728fa5d7fee4ef4cefd643d1c89ca314edd55f32:922c64590222798bb761d5b6d8e72950
|
||||
|
|
Loading…
Reference in New Issue