Authentication bypass in Fortras GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.
The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Goanywhere_managed_file_transfer | Fortra | 7.0.0 (including) | 7.4.1 (excluding) |
| Goanywhere_managed_file_transfer | Fortra | 6.0.0 (including) | 6.0.0 (including) |