writeups.xyz / Broken access control in GoAnywhere Admin portal

Submitter : c2a

Date: 18 March 2024

Bounty : undisclosed

Vulnerabilities :

• Broken Access Control
• Privilege Escalation
• Path Traversal
• Security Code Review

Programs :

• Fortra (GoAnywhere)

Authors :

• Vu Chi Thanh

Link :
https://blog.viettelcybersecurity.com/authentication-bypass-in-goanywhere-admin-portal/