CVE-2024-25157 — Authentication bypass in GoAnywhere MFT prior to 7.6.0
An authentication bypass vulnerability in GoAnywhere MFT prior to 7.6.0 allows Admin Users with access to the Agent Console to circumvent some permission checks when attempting …
Published: 2024-08-14 · CVSS: 6.5 · CVSS 3.1
An authentication bypass vulnerability in GoAnywhere MFT prior to 7.6.0 allows Admin Users with access to the Agent Console to circumvent some permission checks when attempting to visit other pages. This could lead to unauthorized information disclosure or modification.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7