GFI Archiver Missing Authorization Authentication Bypass Vulnerability

A missing authorization vulnerability allowing authentication bypass has been identified in GFI Archiver. This issue arises in the MArc.Store.Remoting.exe process, which listens on port 8018. The vulnerability allows remote attackers to bypass authentication and access functionality without authorization. Exploitation of this vulnerability could be combined with other vulnerabilities to execute code with SYSTEM privileges.

Impact

Bypassing authentication could allow unauthorized users to access restricted functionality, potentially leading to code execution with SYSTEM privileges.

Remediation

Users can upgrade to GFI Archiver version 15.11 to address this vulnerability.