---
id: 10223
title: "CVE-2024-0204: Fortra GoAnywhere MFT Authentication Bypass Deep-Dive"
cve: CVE-2024-0204
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/attack-blogs/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive/"
published_at: "2024-01-23T20:40:25Z"
tags: ["vulnerability-research", "auth-bypass"]
phying_url: "https://phying.com/item/10223"
lang: en
---

# CVE-2024-0204: Fortra GoAnywhere MFT Authentication Bypass Deep-Dive

## Summary

CVE-2024-0204 Fortra GoAnywhere MFT Deep-Dive and Indicators of Compromise. This blog details the authentication bypass which allows an unauthenticated attacker to add an administrative user to the application.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2024-0204
- **Published:** 2024-01-23T20:40:25Z
- **Original:** https://horizon3.ai/attack-research/attack-blogs/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive/
- **Phying News:** https://phying.com/item/10223