Exposed GoAnywhere MFT are subject to an unfixed 0day RCE and should be considered unsafe when made public.
Severity: critical
Fingerprint: b1a07937af044f4619de6baafb4635b9fb4635b9fb4635b9fb4635b9fb4635b9
Found vulnerable GoAnywhere MFT: Affected by CVE-2024-0204
Open service 20.36.130.143:8001
2024-11-29 21:09
HTTP/1.1 302 Set-Cookie: RSESSIONID=5445560D38650C7EE0EB2A9CA836F323; Path=/; Secure; HttpOnly Location: /goanywhere Content-Type: text/html;charset=UTF-8 Content-Length: 0 Date: Fri, 29 Nov 2024 21:09:20 GMT Connection: close
Open service 20.36.130.143:8001
2024-11-27 21:09
HTTP/1.1 302 Set-Cookie: RSESSIONID=07B3B2B80A273A014186593BC553B534; Path=/; Secure; HttpOnly Location: /goanywhere Content-Type: text/html;charset=UTF-8 Content-Length: 0 Date: Wed, 27 Nov 2024 21:09:49 GMT Connection: close