GFI Archiver Authentication Bypass Vulnerability Allowing Code Execution as SYSTEM

An authentication bypass vulnerability has been identified in GFI Archiver. This issue arises from a missing authorization in the MArc.Core.Remoting.exe process, which listens on port 8017. The vulnerability allows remote attackers to bypass authentication and access functionalities without authorization. Exploitation of this vulnerability could be combined with other vulnerabilities to execute code in the context of the SYSTEM user.

Impact

Exploitation of this vulnerability allows for authentication bypass, with potential code execution in the context of the SYSTEM user.

Remediation

Users can upgrade to GFI Archiver version 15.11 to address this vulnerability.