---
id: 7304
title: "Broken access control in GoAnywhere Admin portal"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/authentication-bypass-in-goanywhere-admin-portal/"
published_at: "2024-12-10T10:54:00Z"
tags: ["access-control", "authentication-bypass", "path-traversal", "vulnerability", "goanywhere", "admin-portal"]
phying_url: "https://phying.com/item/7304"
lang: en
---

# Broken access control in GoAnywhere Admin portal

## Summary

A GoAnywhere Admin Portal access-control flaw lets attackers bypass SecurityFilter using path traversal (/a/../) and reach the setup page, enabling unauthenticated creation of an admin account.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2024-12-10T10:54:00Z
- **Original:** https://blog.viettelcybersecurity.com/authentication-bypass-in-goanywhere-admin-portal/
- **Phying News:** https://phying.com/item/7304