Broken access control in GoAnywhere Admin portal
blog.viettelcybersecurity.com | blog | #access-control | #authentication-bypass | #path-traversal | #vulnerability | #goanywhere | #admin-portal
Summary
A GoAnywhere Admin Portal access-control flaw lets attackers bypass SecurityFilter using path traversal (/a/../) and reach the setup page, enabling unauthenticated creation of an admin account.
- Published
- Collected
--- id: 7304 title: "Broken access control in GoAnywhere Admin portal" source_domain: blog.viettelcybersecurity.com source_url: "https://blog.viettelcybersecurity.com/authentication-bypass-in-goanywhere-admin-portal/" published_at: "2024-12-10T10:54:00Z" tags: ["access-control", "authentication-bypass", "path-traversal", "vulnerability", "goanywhere", "admin-portal"] phying_url: "https://phying.com/item/7304" lang: en --- # Broken access control in GoAnywhere Admin portal ## Summary A GoAnywhere Admin Portal access-control flaw lets attackers bypass SecurityFilter using path traversal (/a/../) and reach the setup page, enabling unauthenticated creation of an admin account. ## Intelligence Metadata - **Sources:** blog.viettelcybersecurity.com - **Published:** 2024-12-10T10:54:00Z - **Original:** https://blog.viettelcybersecurity.com/authentication-bypass-in-goanywhere-admin-portal/ - **Phying News:** https://phying.com/item/7304