CVE-2024-25157

Summary

CVE-2024-25157 is an authentication bypass vulnerability affecting GoAnywhere MFT versions before 7.6.0. This issue allows Admin Users with access to the Agent Console to bypass certain permission checks when navigating to other pages. The consequences of exploiting this vulnerability could result in unauthorized information disclosure or modification. GoAnywhere MFT users are strongly advised to upgrade to version 7.6.0 or later to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.